<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Pario TechnoBlob &#187; ubuntu jaunty</title>
	<atom:link href="http://pario.no/tag/ubuntu-jaunty/feed/" rel="self" type="application/rss+xml" />
	<link>http://pario.no</link>
	<description>A cronological documentation test project, nothing serious, really!</description>
	<lastBuildDate>Fri, 10 Sep 2010 06:01:15 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.0.1</generator>
		<item>
		<title>iptables connection tracking table full</title>
		<link>http://pario.no/2009/10/05/iptables-connection-tracking-table-full/</link>
		<comments>http://pario.no/2009/10/05/iptables-connection-tracking-table-full/#comments</comments>
		<pubDate>Mon, 05 Oct 2009 08:48:47 +0000</pubDate>
		<dc:creator>Hans-Henry Jakobsen</dc:creator>
				<category><![CDATA[Linux]]></category>
		<category><![CDATA[Network]]></category>
		<category><![CDATA[iptables]]></category>
		<category><![CDATA[Ubuntu]]></category>
		<category><![CDATA[ubuntu jaunty]]></category>

		<guid isPermaLink="false">http://pario.no/?p=1217</guid>
		<description><![CDATA[I&#8217;ve recently experienced that my workstation (Ubuntu Jaunty Jackalope, 9.04, x86_64) &#8220;hangs&#8221; periodically when my internet browser, Mozilla Firefox, has a lot of active tabs. In my case I had > 100 active tabs in more than 20 windows. I know I should have closed some of them but that is not an option right [...]]]></description>
			<content:encoded><![CDATA[<p>I&#8217;ve recently experienced that my workstation (Ubuntu Jaunty Jackalope, 9.04, x86_64) &#8220;hangs&#8221; periodically when my internet browser, Mozilla Firefox, has a lot of active tabs.<br />
In my case I had > 100 active tabs in more than 20 windows. I know I should have closed some of them but that is not an option right now.</p>
<p>The problem reveiled itself doing a dmesg on my workstation</p>
<pre>
# dmesg

[1737157.057528] nf_conntrack: table full, dropping packet.
[1737157.160357] nf_conntrack: table full, dropping packet.
[1737157.260534] nf_conntrack: table full, dropping packet.
[1737157.361837] nf_conntrack: table full, dropping packet.
[1737157.462305] nf_conntrack: table full, dropping packet.
[1737157.564270] nf_conntrack: table full, dropping packet.
[1737157.666836] nf_conntrack: table full, dropping packet.
[1737157.767348] nf_conntrack: table full, dropping packet.
[1737157.868338] nf_conntrack: table full, dropping packet.
[1737157.969828] nf_conntrack: table full, dropping packet.
[1737162.214064] __ratelimit: 53 callbacks suppressed
</pre>
<p>This bahaviour looks like Denial-Of-Service and is caused by a full iptables connection_table.</p>
<p>The default size of the iptables connection tracing table is </p>
<pre>
# cat /proc/sys/net/ipv4/netfilter/ip_conntrack_max
65536</pre>
<p>The solution I went for was to double the size of connection table to 131072 and restarted firefox.</p>
<pre>
# echo "131072" > /proc/sys/net/ipv4/netfilter/ip_conntrack_max</pre>
<p>This value is a 32-bit integer so the table size can be quite large and you will need much more RAM before you can use this size.</p>
<p>To make this solution permanent I added the following line to <strong>/etc/sysctl.conf</strong></p>
<pre>
net.ipv4.netfilter.ip_conntrack_max = 131072</pre>
<p>You can test this by executing the following command </p>
<pre>
# sysctl -p
131072</pre>
<p>This command loads the <strong>/etc/sysctl.conf</strong> settings.</p>
<script type="text/javascript">var wordpress_toolbar_urls = [];var wordpress_toolbar_url = "http://pario.no/wp-content/plugins/wordpress-toolbar/toolbar.php";var wordpress_toolbar_oinw = "n";var wordpress_toolbar_hash = "aHR0cDovL3BhcmlvLm5vLzIwMDkvMTAvMDUvaXB0YWJsZXMtY29ubmVjdGlvbi10cmFja2luZy10YWJsZS1mdWxsLzx3cHRiPmlwdGFibGVzIGNvbm5lY3Rpb24gdHJhY2tpbmcgdGFibGUgZnVsbDx3cHRiPmh0dHA6Ly9wYXJpby5ubzx3cHRiPlBhcmlvIFRlY2hub0Jsb2I%3D";</script>]]></content:encoded>
			<wfw:commentRss>http://pario.no/2009/10/05/iptables-connection-tracking-table-full/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>
