mån 2009-08-17 klockan 17:41 +0900 skrev Ja-Ryeong Koo: > > 1) I am wondering if there are things to do on the squid box after > increasing ip_conntrack value. Not really. Assuing your Squid is running with sufficient amount of filedescriptors for your load, but that is a different problem entirely. > 2) I have not found the ip_conntrack file. I am using CentOS and > kernel version 2.6.9-78. Can't help you there.. 2.6.9 was eons ago and has faded from memory... but it is in /proc/sys or /sys somewhere.. try find /proc /sys -name '*conntrack*' If you need to increase this a lot then you should increase the conntrack hash size instead. It's also a parameter to the conntrack module (ip_conntract or nf_conntrack depending on kernel version). Regards Henrik