#1  
Old 11th June 2008, 05:55
Chad Chad is offline
Member
 
Join Date: Apr 2007
Posts: 75
Thanks: 0
Thanked 0 Times in 0 Posts
Default packet loss

root@server [~]# tail -f /var/log/messages
Jun 10 14:14:49 server kernel: printk: 56 messages suppressed.
Jun 10 14:14:49 server kernel: ip_conntrack: table full, dropping packet.
Jun 10 14:14:54 server kernel: printk: 59 messages suppressed.
Jun 10 14:14:54 server kernel: ip_conntrack: table full, dropping packet.
Jun 10 14:14:59 server kernel: printk: 85 messages suppressed.
Jun 10 14:14:59 server kernel: ip_conntrack: table full, dropping packet.
Jun 10 14:15:04 server kernel: printk: 90 messages suppressed.
Jun 10 14:15:04 server kernel: ip_conntrack: table full, dropping packet.
Jun 10 14:15:09 server kernel: printk: 58 messages suppressed.
Jun 10 14:15:09 server kernel: ip_conntrack: table full, dropping packet.
Jun 10 14:15:14 server kernel: printk: 70 messages suppressed.
Jun 10 14:15:14 server kernel: ip_conntrack: table full, dropping packet.
Jun 10 14:15:19 server kernel: printk: 193 messages suppressed.
Jun 10 14:15:19 server kernel: ip_conntrack: table full, dropping packet.

Anyone know what this is about?

Using Centos / Cpanel

Linux server.domain.com 2.6.9-67.0.15.ELsmp #1 SMP Thu May 8 10:52:19 EDT 2008 i686 i686 i386 GNU/Linux

root@server [~]# sysctl net.ipv4.netfilter.ip_conntrack_max
net.ipv4.netfilter.ip_conntrack_max = 65536

I ran this in the meantime.

sysctl -w net.ipv4.netfilter.ip_conntrack_max=72000

The rate is continually rising

root@server [~]# wc -l /proc/net/ip_conntrack
65882 /proc/net/ip_conntrack
Attached Images
 
__________________
Talk Jesus Forums & Live Chat www.talkjesus.com
[ Awesome Facts of Jesus Christ: click here ]
Reply With Quote
Sponsored Links
  #2  
Old 11th June 2008, 21:11
Chad Chad is offline
Member
 
Join Date: Apr 2007
Posts: 75
Thanks: 0
Thanked 0 Times in 0 Posts
Default

Still having problems


Code:
root@server [~]# ps -auxf |grep httpd
Warning: bad syntax, perhaps a bogus '-'? See /usr/share/doc/procps-3.2.3/FAQ
root     21816  0.0  0.0  4756  724 pts/1    S+   14:05   0:00                      \_ grep httpd
root     19702  0.0  0.3 46800 14580 ?       SNs  13:53   0:00 /usr/local/apache/bin/httpd -k start -DSSL
root     19709  0.0  0.1 22804 7784 ?        SN   13:53   0:00  \_ /usr/local/apache/bin/httpd -k start -DSSL
nobody   20418  0.6  0.4 48184 18908 ?       SN   14:01   0:01  \_ /usr/local/apache/bin/httpd -k start -DSSL
nobody   20420  0.2  0.4 48292 17792 ?       SN   14:01   0:00  \_ /usr/local/apache/bin/httpd -k start -DSSL
nobody   20427  0.3  0.4 48296 18192 ?       SN   14:01   0:01  \_ /usr/local/apache/bin/httpd -k start -DSSL
nobody   21663  0.6  0.5 48728 21880 ?       SN   14:02   0:01  \_ /usr/local/apache/bin/httpd -k start -DSSL
nobody   21667  0.2  0.4 48216 19304 ?       SN   14:02   0:00  \_ /usr/local/apache/bin/httpd -k start -DSSL
nobody   21668  0.1  0.3 47828 15048 ?       SN   14:02   0:00  \_ /usr/local/apache/bin/httpd -k start -DSSL
nobody   21669  0.4  0.4 48208 17756 ?       SN   14:02   0:00  \_ /usr/local/apache/bin/httpd -k start -DSSL
nobody   21674  0.1  0.3 47948 15904 ?       SN   14:03   0:00  \_ /usr/local/apache/bin/httpd -k start -DSSL
nobody   21686  0.4  0.5 48548 21208 ?       SN   14:03   0:00  \_ /usr/local/apache/bin/httpd -k start -DSSL
nobody   21688  0.1  0.3 47824 15028 ?       SN   14:03   0:00  \_ /usr/local/apache/bin/httpd -k start -DSSL
nobody   21689  0.4  0.5 48604 21996 ?       SN   14:03   0:00  \_ /usr/local/apache/bin/httpd -k start -DSSL
nobody   21701  0.2  0.3 47824 15036 ?       SN   14:03   0:00  \_ /usr/local/apache/bin/httpd -k start -DSSL
nobody   21702  0.3  0.4 48092 17732 ?       SN   14:03   0:00  \_ /usr/local/apache/bin/httpd -k start -DSSL
nobody   21703  0.2  0.3 47824 15520 ?       SN   14:03   0:00  \_ /usr/local/apache/bin/httpd -k start -DSSL
nobody   21704  0.2  0.3 47908 15340 ?       SN   14:03   0:00  \_ /usr/local/apache/bin/httpd -k start -DSSL
nobody   21705  0.5  0.4 48052 18624 ?       SN   14:03   0:00  \_ /usr/local/apache/bin/httpd -k start -DSSL
nobody   21707  0.1  0.3 47824 15036 ?       SN   14:03   0:00  \_ /usr/local/apache/bin/httpd -k start -DSSL
nobody   21724  0.6  0.3 47824 15400 ?       SN   14:04   0:00  \_ /usr/local/apache/bin/httpd -k start -DSSL
nobody   21732  0.1  0.3 47824 15396 ?       SN   14:04   0:00  \_ /usr/local/apache/bin/httpd -k start -DSSL
nobody   21733  0.1  0.3 47832 15380 ?       SN   14:04   0:00  \_ /usr/local/apache/bin/httpd -k start -DSSL
nobody   21736  0.1  0.3 47824 15028 ?       SN   14:04   0:00  \_ /usr/local/apache/bin/httpd -k start -DSSL
nobody   21738  0.1  0.3 47824 15380 ?       SN   14:04   0:00  \_ /usr/local/apache/bin/httpd -k start -DSSL
nobody   21739  0.5  0.4 48320 19424 ?       SN   14:04   0:00  \_ /usr/local/apache/bin/httpd -k start -DSSL
nobody   21740  1.2  0.4 48532 20252 ?       SN   14:04   0:00  \_ /usr/local/apache/bin/httpd -k start -DSSL
nobody   21741  0.2  0.5 51992 22108 ?       SN   14:04   0:00  \_ /usr/local/apache/bin/httpd -k start -DSSL
nobody   21742  0.6  0.3 47832 15384 ?       SN   14:04   0:00  \_ /usr/local/apache/bin/httpd -k start -DSSL
nobody   21743  0.1  0.3 47824 15020 ?       SN   14:04   0:00  \_ /usr/local/apache/bin/httpd -k start -DSSL
nobody   21744  1.1  0.3 47824 15352 ?       SN   14:04   0:00  \_ /usr/local/apache/bin/httpd -k start -DSSL
nobody   21805  0.8  0.4 48312 17692 ?       SN   14:05   0:00  \_ /usr/local/apache/bin/httpd -k start -DSSL
nobody   21814  0.2  0.3 47824 14932 ?       SN   14:05   0:00  \_ /usr/local/apache/bin/httpd -k start -DSSL
Code:
root@server [~]# netstat -ntu | awk '{print $5}' | cut -d: -f1 | sort | uniq -c | sort -nr
     14 84.254.189.64
      8 76.229.163.66
      5 74.6.18.251
      4 80.248.176.136
      4 24.106.187.61
      4 216.215.213.86
      4 213.42.21.61
      4 208.27.123.54
      4 
      3 89.231.204.143
      3 68.155.200.108
      3 200.201.164.26
      3 192.156.52.34
      3 166.102.162.250
      2 89.111.228.127
      2 88.89.134.212
      2 87.14.100.98
      2 79.72.133.105
      2 74.6.22.125
      2 72.189.166.163
      2 71.72.140.14
      2 68.16.225.194
      2 67.195.37.94
      2 65.80.23.104
      2 63.64.53.2
      2 63.240.134.230
      2 205.178.190.97
      2 202.1.192.10
      1 servers)
      1 Address
      1 98.211.4.230
      1 98.20.163.65
      1 89.108.2.162
root@server [~]# wc -l /proc/net/ip_conntrack
wc: /proc/net/ip_conntrack: No space left on device
1878 /proc/net/ip_conntrack


Code:
root@server [~]# df -h
Filesystem            Size  Used Avail Use% Mounted on
/dev/sda3             273G   60G  200G  23% /
/dev/sda1              99M   51M   43M  55% /boot
none                  2.0G     0  2.0G   0% /dev/shm
/dev/sdb1             276G   59G  203G  23% /backup
/usr/tmpDSK           2.5G   43M  2.3G   2% /tmp
/tmp                  2.5G   43M  2.3G   2% /var/tmp
Code:
root@server [~]# tail -f /var/log/messages
Jun 11 14:09:35 server kernel: Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=00:12:3f:20:e0:e8:00:14:f2:c7:f1:80:08:00 SRC=97.102.167.110 DST=147.202.66.19 LEN=80 TOS=0x00 PREC=0x00 TTL=114 ID=2369 PROTO=UDP SPT=500 DPT=500 LEN=60 
Jun 11 14:09:39 server kernel: Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=00:12:3f:20:e0:e8:00:14:f2:c7:f1:80:08:00 SRC=97.102.167.110 DST=147.202.66.19 LEN=80 TOS=0x00 PREC=0x00 TTL=114 ID=2418 PROTO=UDP SPT=500 DPT=500 LEN=60 
Jun 11 14:09:40 server kernel: printk: 150 messages suppressed.
Jun 11 14:09:40 server kernel: ip_conntrack: table full, dropping packet.
Jun 11 14:09:45 server kernel: printk: 151 messages suppressed.
Jun 11 14:09:45 server kernel: ip_conntrack: table full, dropping packet.
Jun 11 14:09:50 server kernel: printk: 119 messages suppressed.
Jun 11 14:09:50 server kernel: ip_conntrack: table full, dropping packet.
Jun 11 14:09:55 server kernel: printk: 163 messages suppressed.
Jun 11 14:09:55 server kernel: ip_conntrack: table full, dropping packet.
Jun 11 14:10:00 server kernel: printk: 124 messages suppressed.
Jun 11 14:10:00 server kernel: ip_conntrack: table full, dropping packet.
Jun 11 14:10:05 server kernel: printk: 168 messages suppressed.
Jun 11 14:10:05 server kernel: ip_conntrack: table full, dropping packet.
root@server [~]# uname -a
Linux server.domain.com 2.6.9-67.0.15.ELsmp #1 SMP Thu May 8 10:52:19 EDT 2008 i686 i686 i386 GNU/Linux


root@server [~]# wc -l /proc/net/ip_conntrack
wc: /proc/net/ip_conntrack: No space left on device
1883 /proc/net/ip_conntrack

root@server [~]# sysctl net.ipv4.netfilter.ip_conntrack_max
net.ipv4.netfilter.ip_conntrack_max = 75000
__________________
Talk Jesus Forums & Live Chat www.talkjesus.com
[ Awesome Facts of Jesus Christ: click here ]
Reply With Quote
  #3  
Old 12th June 2008, 14:13
falko falko is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 41,701
Thanks: 1,900
Thanked 2,744 Times in 2,577 Posts
 
Default

This link might help: http://support.imagestream.com/Resol...ll_Errors.html
__________________
Falko
--
Download the ISPConfig 3 Manual! | Check out the ISPConfig 3 Billing Module!

FB: http://www.facebook.com/howtoforge

nginx-Webhosting: Timme Hosting | Follow me on:
Reply With Quote
Reply

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
Nic Bonding/Teaming Howto themachine HOWTO-Related Questions 14 3rd May 2011 23:13
"incoming packet was garbled on decryption" ?????? debian 4 ssh error mesti Server Operation 3 20th May 2008 23:27
Ubuntu-Server 6.10 As A Firewall/Gateway Vpn Server Problem steveomach3ww HOWTO-Related Questions 6 26th March 2007 13:35
precompile intall packet for sarge tom Installation/Configuration 1 9th April 2006 17:56
can't receive mail Jordy General 10 1st November 2005 19:15


All times are GMT +2. The time now is 07:37.


Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2014, vBulletin Solutions, Inc.