On Mon, 13 Jun 2005, Paul Seaman wrote: > I posted this because I run a squid proxy on a busy box. I am aware of the > status of ip_conntrack as a non-Squid project However, many people who run > squid on this list do so on a busy box. Strange, I have a much bigger squid box and don't recall seeing this error. The one change I did make was to increase the /proc/sys/net/ipv4/neigh/default/gc_thresh3 value, which stops neighbour overflow errors. Michael Young