Messages in this thread | | | Date | Thu, 20 Dec 2007 11:08:45 -0500 | From | "James Nichols" <> | Subject | Re: After many hours all outbound connections get stuck in SYN_SENT |
| |
> I still dont understand. > > "tcpdump -p -n -s 1600 -c 10000" doesnt reveal User data at all. > > Without any exact data from you, I am afraid nobody can help.
Oh, I didn't see that you specified specific options. I'll still have to anonymize 2000+ IP addresses, but I think there is an open source tool that will do this for you.
> >> 2) Are you sure you are not using connection tracking, and hit a limit on it ? > > > > I'm using ip_conntrack, but the limit I have for max entries is 65K. > > The most I've seen in there are a couple thousand- that was one of the > > first things I monitored very closely. > > Now please try without conn tracking module. I saw many failures in the past > that were trigered by conntrack. > > Do you have some firewall rules, using some netfilter modules like hashlimit ?
I will have to look into this.
| |