Re: Iptables find invalid packets

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Bernhard Bock a écrit :
Dimitri GOURDON wrote:
There are 2 parameters that can perhaps help me :

cat /proc/sys/net/ipv4/netfilter/ip_conntrack_max
65520
cat /proc/sys/net/ipv4/netfilter/ip_conntrack_buckets
8190

I can modify the first on the fly (the problem is the same : no change)
But not the second...

Depending on your kernel version, you may have to set the value when loading the module. Try to insert the following line in /etc/modprobe.conf (or similar, depending on your linux distribution):

options nf_conntrack hashsize=16384

best regards
Bernhard
Finally, I've successed to modify the 2 parameters. I have respectively modify them with 131072 and 16384. And the problem stay entire...

Thanks.

Have you other ideas ???
--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html

[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux