今天查看系統(tǒng)日志發(fā)現(xiàn)大量的nf_conntrack: table full, dropping packet. 錯(cuò)誤
cat /var/log/messages | more
Jun??7 09:52:05 localhost kernel: nf_conntrack: table full, dropping packet.
Jun??7 09:52:05 localhost kernel: nf_conntrack: table full, dropping packet.
Jun??7 09:52:05 localhost kernel: nf_conntrack: table full, dropping packet.
Jun??7 09:52:05 localhost kernel: nf_conntrack: table full, dropping packet.
Jun??7 09:52:05 localhost kernel: nf_conntrack: table full, dropping packet.
Jun??7 09:52:05 localhost kernel: nf_conntrack: table full, dropping packet.
Jun??7 09:52:05 localhost kernel: nf_conntrack: table full, dropping packet.
Jun??7 09:52:05 localhost kernel: nf_conntrack: table full, dropping packet.
Jun??7 09:52:10 localhost kernel: nf_conntrack: table full, dropping packet.
Jun??7 09:52:10 localhost kernel: nf_conntrack: table full, dropping packet.
Jun??7 09:52:10 localhost kernel: nf_conntrack: table full, dropping packet.
Jun??7 09:52:10 localhost kernel: nf_conntrack: table full, dropping packet.
Jun??7 09:52:10 localhost kernel: nf_conntrack: table full, dropping packet.
Jun??7 09:52:10 localhost kernel: nf_conntrack: table full, dropping packet.
Jun??7 09:52:10 localhost kernel: nf_conntrack: table full, dropping packet.
Jun??7 09:52:10 localhost kernel: nf_conntrack: table full, dropping packet.
Jun??7 09:52:10 localhost kernel: nf_conntrack: table full, dropping packet.
Jun??7 09:52:10 localhost kernel: nf_conntrack: table full, dropping packet.
Jun??7 09:52:15 localhost kernel: nf_conntrack: table full, dropping packet.
Jun??7 09:52:15 localhost kernel: nf_conntrack: table full, dropping packet.
Jun??7 09:52:15 localhost kernel: nf_conntrack: table full, dropping packet.
Jun??7 09:52:15 localhost kernel: nf_conntrack: table full, dropping packet.
Jun??7 09:52:15 localhost kernel: nf_conntrack: table full, dropping packet.
Jun??7 09:52:15 localhost kernel: nf_conntrack: table full, dropping packet.
Jun??7 09:52:15 localhost kernel: nf_conntrack: table full, dropping packet.
Jun??7 09:52:15 localhost kernel: nf_conntrack: table full, dropping packet.
Jun??7 09:52:15 localhost kernel: nf_conntrack: table full, dropping packet.
Jun??7 09:52:15 localhost kernel: nf_conntrack: table full, dropping packet.
Jun??7 09:52:23 localhost kernel: nf_conntrack: table full, dropping packet.
Jun??7 09:52:23 localhost kernel: nf_conntrack: table full, dropping packet.
Jun??7 09:52:23 localhost kernel: nf_conntrack: table full, dropping packet.
Jun??7 09:52:23 localhost kernel: nf_conntrack: table full, dropping packet.
Jun??7 09:52:23 localhost kernel: nf_conntrack: table full, dropping packet.
Jun??7 09:52:23 localhost kernel: nf_conntrack: table full, dropping packet.
Jun??7 09:52:23 localhost kernel: nf_conntrack: table full, dropping packet.
Jun??7 09:52:23 localhost kernel: nf_conntrack: table full, dropping packet.
Jun??7 09:52:23 localhost kernel: nf_conntrack: table full, dropping packet.
Jun??7 09:52:23 localhost kernel: nf_conntrack: table full, dropping packet.
Jun??7 09:52:30 localhost kernel: nf_conntrack: table full, dropping packet.
Jun??7 09:52:30 localhost kernel: nf_conntrack: table full, dropping packet.
Jun??7 09:52:30 localhost kernel: nf_conntrack: table full, dropping packet.
Jun??7 09:52:30 localhost kernel: nf_conntrack: table full, dropping packet.
Jun??7 09:52:30 localhost kernel: nf_conntrack: table full, dropping packet.
Jun??7 09:52:30 localhost kernel: nf_conntrack: table full, dropping packet.
Jun??7 09:52:30 localhost kernel: nf_conntrack: table full, dropping packet.
Jun??7 09:52:30 localhost kernel: nf_conntrack: table full, dropping packet.
Jun??7 09:52:30 localhost kernel: nf_conntrack: table full, dropping packet.
Jun??7 09:52:30 localhost kernel: nf_conntrack: table full, dropping packet.
解決辦法：
vim /etc/sysctl.conf
加入：
net.nf_conntrack_max = 655350
net.netfilter.nf_conntrack_tcp_timeout_established = 1200
CENTOS 6.1或以上版本使用：
net.netfilter.nf_conntrack_max = 655350
net.netfilter.nf_conntrack_tcp_timeout_established = 1200
保存后執(zhí)行 sysctl -p 使之生效，然后觀察該錯(cuò)誤是不是沒(méi)有了。
Jun??7 09:52:05 localhost kernel: nf_conntrack: table full, dropping packet.
Jun??7 09:52:05 localhost kernel: nf_conntrack: table full, dropping packet.
Jun??7 09:52:05 localhost kernel: nf_conntrack: table full, dropping packet.
Jun??7 09:52:05 localhost kernel: nf_conntrack: table full, dropping packet.
Jun??7 09:52:05 localhost kernel: nf_conntrack: table full, dropping packet.
Jun??7 09:52:05 localhost kernel: nf_conntrack: table full, dropping packet.
Jun??7 09:52:05 localhost kernel: nf_conntrack: table full, dropping packet.
Jun??7 09:52:05 localhost kernel: nf_conntrack: table full, dropping packet.
Jun??7 09:52:10 localhost kernel: nf_conntrack: table full, dropping packet.
Jun??7 09:52:10 localhost kernel: nf_conntrack: table full, dropping packet.
Jun??7 09:52:10 localhost kernel: nf_conntrack: table full, dropping packet.
Jun??7 09:52:10 localhost kernel: nf_conntrack: table full, dropping packet.
Jun??7 09:52:10 localhost kernel: nf_conntrack: table full, dropping packet.
Jun??7 09:52:10 localhost kernel: nf_conntrack: table full, dropping packet.
Jun??7 09:52:10 localhost kernel: nf_conntrack: table full, dropping packet.
Jun??7 09:52:10 localhost kernel: nf_conntrack: table full, dropping packet.
Jun??7 09:52:10 localhost kernel: nf_conntrack: table full, dropping packet.
Jun??7 09:52:10 localhost kernel: nf_conntrack: table full, dropping packet.
Jun??7 09:52:15 localhost kernel: nf_conntrack: table full, dropping packet.
Jun??7 09:52:15 localhost kernel: nf_conntrack: table full, dropping packet.
Jun??7 09:52:15 localhost kernel: nf_conntrack: table full, dropping packet.
Jun??7 09:52:15 localhost kernel: nf_conntrack: table full, dropping packet.
Jun??7 09:52:15 localhost kernel: nf_conntrack: table full, dropping packet.
Jun??7 09:52:15 localhost kernel: nf_conntrack: table full, dropping packet.
Jun??7 09:52:15 localhost kernel: nf_conntrack: table full, dropping packet.
Jun??7 09:52:15 localhost kernel: nf_conntrack: table full, dropping packet.
Jun??7 09:52:15 localhost kernel: nf_conntrack: table full, dropping packet.
Jun??7 09:52:15 localhost kernel: nf_conntrack: table full, dropping packet.
Jun??7 09:52:23 localhost kernel: nf_conntrack: table full, dropping packet.
Jun??7 09:52:23 localhost kernel: nf_conntrack: table full, dropping packet.
Jun??7 09:52:23 localhost kernel: nf_conntrack: table full, dropping packet.
Jun??7 09:52:23 localhost kernel: nf_conntrack: table full, dropping packet.
Jun??7 09:52:23 localhost kernel: nf_conntrack: table full, dropping packet.
Jun??7 09:52:23 localhost kernel: nf_conntrack: table full, dropping packet.
Jun??7 09:52:23 localhost kernel: nf_conntrack: table full, dropping packet.
Jun??7 09:52:23 localhost kernel: nf_conntrack: table full, dropping packet.
Jun??7 09:52:23 localhost kernel: nf_conntrack: table full, dropping packet.
Jun??7 09:52:23 localhost kernel: nf_conntrack: table full, dropping packet.
Jun??7 09:52:30 localhost kernel: nf_conntrack: table full, dropping packet.
Jun??7 09:52:30 localhost kernel: nf_conntrack: table full, dropping packet.
Jun??7 09:52:30 localhost kernel: nf_conntrack: table full, dropping packet.
Jun??7 09:52:30 localhost kernel: nf_conntrack: table full, dropping packet.
Jun??7 09:52:30 localhost kernel: nf_conntrack: table full, dropping packet.
Jun??7 09:52:30 localhost kernel: nf_conntrack: table full, dropping packet.
Jun??7 09:52:30 localhost kernel: nf_conntrack: table full, dropping packet.
Jun??7 09:52:30 localhost kernel: nf_conntrack: table full, dropping packet.
Jun??7 09:52:30 localhost kernel: nf_conntrack: table full, dropping packet.
Jun??7 09:52:30 localhost kernel: nf_conntrack: table full, dropping packet.
解決辦法：
vim /etc/sysctl.conf
加入：
net.nf_conntrack_max = 655350
net.netfilter.nf_conntrack_tcp_timeout_established = 1200
CENTOS 6.1或以上版本使用：
net.netfilter.nf_conntrack_max = 655350
net.netfilter.nf_conntrack_tcp_timeout_established = 1200
保存后執(zhí)行 sysctl -p 使之生效，然后觀察該錯(cuò)誤是不是沒(méi)有了。
更多文章、技術(shù)交流、商務(wù)合作、聯(lián)系博主
微信掃碼或搜索：z360901061
微信掃一掃加我為好友
QQ號(hào)聯(lián)系： 360901061
您的支持是博主寫作最大的動(dòng)力，如果您喜歡我的文章，感覺(jué)我的文章對(duì)您有幫助，請(qǐng)用微信掃描下面二維碼支持博主2元、5元、10元、20元等您想捐的金額吧，狠狠點(diǎn)擊下面給點(diǎn)支持吧，站長(zhǎng)非常感激您！手機(jī)微信長(zhǎng)按不能支付解決辦法：請(qǐng)將微信支付二維碼保存到相冊(cè)，切換到微信，然后點(diǎn)擊微信右上角掃一掃功能，選擇支付二維碼完成支付。
【本文對(duì)您有幫助就好】元
