netdev - Re: [Bugme-new] [Bug 7757] New: ip_conntrack:table full, dropping connection after kernel update

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Date:	Sun, 31 Dec 2006 20:46:34 -0800
From:	Andrew Morton <akpm@...l.org>
To:	netdev@...r.kernel.org
Cc:	"bugme-daemon@...nel-bugs.osdl.org" 
	<bugme-daemon@...zilla.kernel.org>, joelol75@...izon.net
Subject: Re: [Bugme-new] [Bug 7757] New: ip_conntrack:table full, dropping
 connection after kernel update

On Sun, 31 Dec 2006 19:03:34 -0800
bugme-daemon@...zilla.kernel.org wrote:

> http://bugzilla.kernel.org/show_bug.cgi?id=7757
> 
>            Summary: ip_conntrack:table full, dropping connection after
>                     kernel update
>     Kernel Version: 2.6.19.1
>             Status: NEW
>           Severity: normal
>              Owner: shemminger@...l.org
>          Submitter: joelol75@...izon.net
> 
> 
> Most recent kernel where this bug did *NOT* occur:2.6.10
> Distribution:Kubuntu
> Hardware Environment:AMD64X2, Geforce6100 North, NForce 430 South, forcedeth driver
> Software Environment:
> Problem Description:dmesg shows above/dead network.  netstat shows piles of
> FIN_WAIT1 connections, using same /proc/sys/net/ipv4 settings
> 
> Steps to reproduce: Update Edgy 2.6.17-10 kernel with vanilla &.1 patch. Turned
> on DMA engine, and nv_sata with k7 (32 bit kernel) optimizations (only changes).
>  Used GTK-gnutella or any p2p that really wrings out the ip stack.  A few hours
> later bandwidth slows to a crawl and only currently open connections are alive.   
> 
> Bring down the network and bringing it back up to clear the tables doesn't
> remove the fin_wait1's.  Any workarounds or maybe a new setting that I
> overlooked that the kernel needs would be greatly appc'd.
> 
> Cheers.
> 
> ------- You are receiving this mail because: -------
> You are on the CC list for the bug, or are watching someone who is.
-
To unsubscribe from this list: send the line "unsubscribe netdev" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html