/proc/net/ip_conntrack

[Kurt Wall]

In a 0.9K blaze of typing glory, M.W. Chang wrote:
> M.W. Chang wrote:
> 
> > Occassionally, my ip_conntrack exceeded the ip_conntrack_max. How could 
> > I prevent that from happening?
> > 
> > My current value of ip_conntrack_max is about 8000, and I am running a 
> > relatively public bt-tracker.
> > 
> > I noticed some IP have over 30 entries in ip_conntract connecting to the 
> > bttracker. I don't know why they needed more than one connection.
> > 
> more information:
> 
> root at server: scripts> grep ^tcp /proc/net/ip_conntrack | awk '{print
> $4}' | sort | uniq -c
>      61 CLOSE
>     119 CLOSE_WAIT
>    2172 ESTABLISHED
>      78 FIN_WAIT
>      68 SYN_RECV
>    4289 SYN_SENT
>    4855 TIME_WAIT
> 
> Could I make those TIME_WAIT connections to get killed more promptly?

Off the top of my head, no.

Kurt
-- 
63,000 bugs in the code, 63,000 bugs, 
ya get 1 whacked with a service pack, 
now there's 63,005 bugs in the code!!