Liviu Andreicut wrote:

>>ip_conntrack: table full, dropping packet.
>>
>>asta apare...
>>sistemul e un
>>server:/home/packardb# cat /proc/cpuinfo
>>processor       : 0
>>vendor_id       : GenuineIntel
>>cpu family      : 6
>>model           : 5
>>model name      : Celeron (Covington)
>>stepping        : 0
>>cpu MHz         : 267.275
>>cache size      : 32 KB
>>fdiv_bug        : no
>>hlt_bug         : no
>>f00f_bug        : no
>>coma_bug        : no
>>fpu             : yes
>>fpu_exception   : yes
>>cpuid level     : 2
>>wp              : yes
>>flags           : fpu vme de pse tsc msr pae mce cx8 sep mtrr pge mca
>>cmov pat pse36 mmx fxsr
>>bogomips        : 532.48
>>
>>server:/home/packardb# cat /proc/meminfo
>>        total:    used:    free:  shared: buffers:  cached:
>>Mem:  64413696 62898176  1515520         19156992  5836800
>>Swap: 313778176         313778176
>>MemTotal:        62904 kB
>>MemFree:          1480 kB
>>MemShared:            kB
>>Buffers:         18708 kB
>>Cached:           5700 kB
>>SwapCached:           kB
>>Active:          11028 kB
>>Inactive:        19688 kB
>>HighTotal:            kB
>>HighFree:             kB
>>LowTotal:        62904 kB
>>LowFree:          1480 kB
>>SwapTotal:      306424 kB
>>SwapFree:       306424 kB
>>
>>server:/home/packardb# cat /proc/sys/net/ipv4/ip_conntrack_max
>>8192
>>
>>pus de mine de la 4096....
>>unde gresesc? sistemul face nat la 26 de ip-uri...oare asta sa fie
>>problema? mai trebuie ram pentru a face fata?
>>din cate stiu astea nu se pun/fac in swap, deci...
>>
>>---
>>Detalii despre listele noastre de mail: http://www.lug.ro/
>>
>>
>>
>>    
>>
>
>ai utilizatori care ies prin nat si fac multe sesiuni tcp probabil.
>Mareste numarul de sesiuni maxim (echo "65535" >
>/proc/sys/net/ipv4/ip_conntrack_max)
>Daca micsorezi numarul de conexiuni maxime nu rezolvi problema. Daca tot
>vrei sa restrictionezi numarul de conexiuni paralele, incearca extensia
>connlimit din patch-o-matic.
>
>
>  
>
pai incercasem s-o maresc, nu s-o micsorez, dar nu m-am riscat s-o pun 
prea mare, oricum, am sa incerc ambele variante. Danke.

--- 
Detalii despre listele noastre de mail: http://www.lug.ro/


Raspunde prin e-mail lui