/proc/net/ip_conntrack

[M.W. Chang]

M.W. Chang wrote:

> Occassionally, my ip_conntrack exceeded the ip_conntrack_max. How could 
> I prevent that from happening?
> 
> My current value of ip_conntrack_max is about 8000, and I am running a 
> relatively public bt-tracker.
> 
> I noticed some IP have over 30 entries in ip_conntract connecting to the 
> bttracker. I don't know why they needed more than one connection.
> 
more information:

root at server: scripts> grep ^tcp /proc/net/ip_conntrack | awk '{print
$4}' | sort | uniq -c
     61 CLOSE
    119 CLOSE_WAIT
   2172 ESTABLISHED
     78 FIN_WAIT
     68 SYN_RECV
   4289 SYN_SENT
   4855 TIME_WAIT

Could I make those TIME_WAIT connections to get killed more promptly?


-- 
  .~.    http://toylet.homeip.net
 / v \   Linux 2.4.27
/( _ )\  1:10am up 52 min 1 user
  ^ ^    2.21 1.99