Hi, I've also done some plotting.
about 400 student-machines behind router, it's summer now so there's not as much traffic as the rest of the year, only ~28k entries. hashsize is 16384 with default ip_conntrack_max of 131072. http://gandalf.hjorten.nu/kna-gw/ I added 16384 as size in ctreport as this is what's currently used. There's a huge diffrence between 16384 and 1638[35], from a maximum length of 181 down to 9. -- /Martin Never argue with an idiot. They drag you down to their level, then beat you with experience.