On Thu, May 16, 2019 at 11:47 AM Mikhail Morfikov <mmorfikov@xxxxxxxxx> wrote: > > Also, it looks like that only the thunderbird app has issues with it. > I have over 100 apps filtered in the OUTPUT, and I didn't see any > messages concerning their ports. So maybe some entries in the > conntract table hit their timeout while time goes by? It looks like > this problem concerns only the long lived established connections. > > It's just my thoughts, correct me if I'm wrong or if you have > some better ideas. :) Hi Mikhail, Thanks for your reply. Interesting observation regarding long lasting connections. I also have ~20 ports opened _from_ that server (DNS/NTP/SSH/http/s to some local servers), but only 3128/tcp and 3306/tcp seem to generate those drops. Regards, Roman