MultiCom Technical Support Forum Index MultiCom Technical Support
Supporting MultiCom Routers, Firewalls and VPN
 
 FAQFAQ   SearchSearch   MemberlistMemberlist   UsergroupsUsergroups   RegisterRegister 
 ProfileProfile   Log in to check your private messagesLog in to check your private messages   Log inLog in 

Syslog says:kernel:ip_conntrack: table full, dropping packet

 
Post new topic   Reply to topic    MultiCom Technical Support Forum Index -> 3.x Network Address Translation
View previous topic :: View next topic  
Author Message
Support



Joined: 09 Oct 2002
Posts: 175
Location: Lausanne, Switzerland

PostPosted: Tue Jul 15, 03 16:43    Post subject: Syslog says:kernel:ip_conntrack: table full, dropping packet Reply with quote

By default the MultiCom Firewall keeps a connection table of 2,048 connections. If you have a heavy traffic load (popular webservers or many Internet users in the office) you may need to increase this.

The syslog message says that the connection table is full and that a traffic that would have otherwise have been entered into the table was dropped. For normal traffic the request will simply be automatically resent by the software sending the packet but it is possible to increase the size of the connection table if you receive this message frequently.

This can be changed by telneting into the device and enter this command:

Code:
Config /: set ip nat max_connection_tracking=4096
Config /: saveconfig current


or

Code:
Config /: saveconfig boot
Back to top
View user's profile Send private message Send e-mail Visit poster's website
Display posts from previous:   
Post new topic   Reply to topic    MultiCom Technical Support Forum Index -> 3.x Network Address Translation All times are GMT + 1 Hour
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum


Powered by phpBB © 2001, 2005 phpBB Group