On Friday 2008-07-18 11:39, Bernhard Bock wrote: > > With 100 parallel TCP connections, it works. With 1000 parallel TCP > connections, I start seeing INVALID packets. > > Can somebody point me in a direction where to search for the root cause? Vague guess.. You have too few memory and/or your connection table is full, hence connections are dropped and future packets can't find their original connection, resulting in INVALID. (Though I'd say they should become NEW again) -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html