Re: ESTABLISHED tcp conntrack timeout

2019-04-16 Thread Naruto Nguyen
Hi Pablo, Thanks very much for your reply. I will describe the test later. Could you please let me know more clearly in case the TCP_CONNTRACK_UNACK is set if IP_CT_TCP_FLAG_DATA_UNACKNOWLEDGED is set? Does it indicate some UNACK packets due to network congestion, but eventually the ACK is sent, s

Re: ESTABLISHED tcp conntrack timeout

2019-04-11 Thread Pablo Neira Ayuso
Hi, Dropping Cc to netdev and netfilter, no need to Cc everyone :-) On Wed, Apr 10, 2019 at 05:47:35PM +0700, Naruto Nguyen wrote: > Hello everyone, > > When duplicating tcp conntrack from main name space to another network > namespace, I see that sometimes timeout value for an established tcp >