<?xml version="1.0" encoding="UTF-8" ?>
<rss version="2.0">
<channel>
<title><![CDATA[静怡家园]]></title> 
<link>http://www.zhanghaijun.com/index.php</link> 
<description><![CDATA[书山有路勤为径，学海无涯苦作舟！]]></description> 
<language>zh-cn</language> 
<copyright><![CDATA[静怡家园]]></copyright>
<item>
<link>http://www.zhanghaijun.com/post//</link>
<title><![CDATA[nf_conntrack: table full, dropping packet 错误解决]]></title> 
<author>碟舞飞扬 &lt;webmaster@zhanghaijun.com&gt;</author>
<category><![CDATA[服务器类]]></category>
<pubDate>Thu, 07 Jun 2012 03:34:34 +0000</pubDate> 
<guid>http://www.zhanghaijun.com/post//</guid> 
<description>
<![CDATA[ 
	今天查看系统日志发现大量的nf_conntrack: table full, dropping packet. 错误<br/>cat /var/log/messages &#124; more<br/>Jun&nbsp;&nbsp;7 09:52:05 localhost kernel: nf_conntrack: table full, dropping packet.<br/>Jun&nbsp;&nbsp;7 09:52:05 localhost kernel: nf_conntrack: table full, dropping packet.<br/>Jun&nbsp;&nbsp;7 09:52:05 localhost kernel: nf_conntrack: table full, dropping packet.<br/>Jun&nbsp;&nbsp;7 09:52:05 localhost kernel: nf_conntrack: table full, dropping packet.<br/>Jun&nbsp;&nbsp;7 09:52:05 localhost kernel: nf_conntrack: table full, dropping packet.<br/>Jun&nbsp;&nbsp;7 09:52:05 localhost kernel: nf_conntrack: table full, dropping packet.<br/>Jun&nbsp;&nbsp;7 09:52:05 localhost kernel: nf_conntrack: table full, dropping packet.<br/>Jun&nbsp;&nbsp;7 09:52:05 localhost kernel: nf_conntrack: table full, dropping packet.<br/>Jun&nbsp;&nbsp;7 09:52:10 localhost kernel: nf_conntrack: table full, dropping packet.<br/>Jun&nbsp;&nbsp;7 09:52:10 localhost kernel: nf_conntrack: table full, dropping packet.<br/>Jun&nbsp;&nbsp;7 09:52:10 localhost kernel: nf_conntrack: table full, dropping packet.<br/>Jun&nbsp;&nbsp;7 09:52:10 localhost kernel: nf_conntrack: table full, dropping packet.<br/>Jun&nbsp;&nbsp;7 09:52:10 localhost kernel: nf_conntrack: table full, dropping packet.<br/>Jun&nbsp;&nbsp;7 09:52:10 localhost kernel: nf_conntrack: table full, dropping packet.<br/>Jun&nbsp;&nbsp;7 09:52:10 localhost kernel: nf_conntrack: table full, dropping packet.<br/>Jun&nbsp;&nbsp;7 09:52:10 localhost kernel: nf_conntrack: table full, dropping packet.<br/>Jun&nbsp;&nbsp;7 09:52:10 localhost kernel: nf_conntrack: table full, dropping packet.<br/>Jun&nbsp;&nbsp;7 09:52:10 localhost kernel: nf_conntrack: table full, dropping packet.<br/>Jun&nbsp;&nbsp;7 09:52:15 localhost kernel: nf_conntrack: table full, dropping packet.<br/>Jun&nbsp;&nbsp;7 09:52:15 localhost kernel: nf_conntrack: table full, dropping packet.<br/>Jun&nbsp;&nbsp;7 09:52:15 localhost kernel: nf_conntrack: table full, dropping packet.<br/>Jun&nbsp;&nbsp;7 09:52:15 localhost kernel: nf_conntrack: table full, dropping packet.<br/>Jun&nbsp;&nbsp;7 09:52:15 localhost kernel: nf_conntrack: table full, dropping packet.<br/>Jun&nbsp;&nbsp;7 09:52:15 localhost kernel: nf_conntrack: table full, dropping packet.<br/>Jun&nbsp;&nbsp;7 09:52:15 localhost kernel: nf_conntrack: table full, dropping packet.<br/>Jun&nbsp;&nbsp;7 09:52:15 localhost kernel: nf_conntrack: table full, dropping packet.<br/>Jun&nbsp;&nbsp;7 09:52:15 localhost kernel: nf_conntrack: table full, dropping packet.<br/>Jun&nbsp;&nbsp;7 09:52:15 localhost kernel: nf_conntrack: table full, dropping packet.<br/>Jun&nbsp;&nbsp;7 09:52:23 localhost kernel: nf_conntrack: table full, dropping packet.<br/>Jun&nbsp;&nbsp;7 09:52:23 localhost kernel: nf_conntrack: table full, dropping packet.<br/>Jun&nbsp;&nbsp;7 09:52:23 localhost kernel: nf_conntrack: table full, dropping packet.<br/>Jun&nbsp;&nbsp;7 09:52:23 localhost kernel: nf_conntrack: table full, dropping packet.<br/>Jun&nbsp;&nbsp;7 09:52:23 localhost kernel: nf_conntrack: table full, dropping packet.<br/>Jun&nbsp;&nbsp;7 09:52:23 localhost kernel: nf_conntrack: table full, dropping packet.<br/>Jun&nbsp;&nbsp;7 09:52:23 localhost kernel: nf_conntrack: table full, dropping packet.<br/>Jun&nbsp;&nbsp;7 09:52:23 localhost kernel: nf_conntrack: table full, dropping packet.<br/>Jun&nbsp;&nbsp;7 09:52:23 localhost kernel: nf_conntrack: table full, dropping packet.<br/>Jun&nbsp;&nbsp;7 09:52:23 localhost kernel: nf_conntrack: table full, dropping packet.<br/>Jun&nbsp;&nbsp;7 09:52:30 localhost kernel: nf_conntrack: table full, dropping packet.<br/>Jun&nbsp;&nbsp;7 09:52:30 localhost kernel: nf_conntrack: table full, dropping packet.<br/>Jun&nbsp;&nbsp;7 09:52:30 localhost kernel: nf_conntrack: table full, dropping packet.<br/>Jun&nbsp;&nbsp;7 09:52:30 localhost kernel: nf_conntrack: table full, dropping packet.<br/>Jun&nbsp;&nbsp;7 09:52:30 localhost kernel: nf_conntrack: table full, dropping packet.<br/>Jun&nbsp;&nbsp;7 09:52:30 localhost kernel: nf_conntrack: table full, dropping packet.<br/>Jun&nbsp;&nbsp;7 09:52:30 localhost kernel: nf_conntrack: table full, dropping packet.<br/>Jun&nbsp;&nbsp;7 09:52:30 localhost kernel: nf_conntrack: table full, dropping packet.<br/>Jun&nbsp;&nbsp;7 09:52:30 localhost kernel: nf_conntrack: table full, dropping packet.<br/>Jun&nbsp;&nbsp;7 09:52:30 localhost kernel: nf_conntrack: table full, dropping packet.<br/><strong>解决办法：</strong><br/>vi /etc/sysctl.conf<br/>加入：<br/>net.nf_conntrack_max = 655350<br/>net.netfilter.nf_conntrack_tcp_timeout_established = 1200<br/>CENTOS 6.1或以上版本使用：<br/>net.netfilter.nf_conntrack_max = 655350<br/>net.netfilter.nf_conntrack_tcp_timeout_established = 1200<br/>保存后执行 sysctl -p 使之生效，然后观察该错误是不是没有了。<br/>Tags - <a href="http://www.zhanghaijun.com/tags/nf_conntrack/" rel="tag">nf conntrack</a> , <a href="http://www.zhanghaijun.com/tags/linux/" rel="tag">linux</a>
]]>
</description>
</item><item>
<link>http://www.zhanghaijun.com/post//#blogcomment</link>
<title><![CDATA[[评论] nf_conntrack: table full, dropping packet 错误解决]]></title> 
<author> &lt;user@domain.com&gt;</author>
<category><![CDATA[评论]]></category>
<pubDate>Thu, 01 Jan 1970 00:00:00 +0000</pubDate> 
<guid>http://www.zhanghaijun.com/post//#blogcomment</guid> 
<description>
<![CDATA[ 
	
]]>
</description>
</item>
</channel>
</rss>