Support
Joined: 09 Oct 2002 Posts: 175 Location: Lausanne, Switzerland
|
Posted: Tue Jul 15, 03 16:43 Post subject: Syslog says:kernel:ip_conntrack: table full, dropping packet |
|
|
By default the MultiCom Firewall keeps a connection table of 2,048 connections. If you have a heavy traffic load (popular webservers or many Internet users in the office) you may need to increase this.
The syslog message says that the connection table is full and that a traffic that would have otherwise have been entered into the table was dropped. For normal traffic the request will simply be automatically resent by the software sending the packet but it is possible to increase the size of the connection table if you receive this message frequently.
This can be changed by telneting into the device and enter this command:
Code: | Config /: set ip nat max_connection_tracking=4096
Config /: saveconfig current |
or
Code: | Config /: saveconfig boot |
|
|