In message <[EMAIL PROTECTED]> you write:
> 
> is there a way to dynamically change the limit : kernel: ip_conntrack:
> maximum limit of 16384 entries exceeded ?

echo 32768 > /proc/net/ipv4/ip_conntrack_max

Don't increase it too much, or your efficiency will go out the window
(the hash table size doesn't increase).

> either a newssus scan or a weird ftp server I tried to connect to,
> caused the table to fill pretty fast and all other connections stopped
> for a short time.

It will start dropping "unreplied" connections.

Rusty.
--
Premature optmztion is rt of all evl. --DK
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to [EMAIL PROTECTED]
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/

Reply via email to