OpenVZ Forum


Home » General » Support » Server crashing ::ip_conntrack: CT 0: table full, dropping packet.
Server crashing ::ip_conntrack: CT 0: table full, dropping packet. [message #39190] Thu, 25 March 2010 16:42 Go to next message
whatever is currently offline  whatever
Messages: 142
Registered: September 2006
Senior Member
We are getting strange error in error logs and server crashing often.
Kernel
#uname -a
#Linux 2.6.18-164.11.1.el5.028stab068.3 #1 SMP Wed Feb 17 15:22:30 MSK 2010 x86_64 x86_64 x86_64 GNU/Linux
When we install latest kernel server don't boot.
#yum install ovzkernel-PAE
or
#yum install ovzkernel-ENT


Log

Mar 24 19:24:52 server97 kernel: ip_conntrack: CT 0: table full, dropping packet.
Mar 24 19:24:57 server97 kernel: printk: 42 messages suppressed.
Mar 24 19:24:57 server97 kernel: ip_conntrack: CT 0: table full, dropping packet.
Mar 24 19:25:02 server97 kernel: printk: 73 messages suppressed.
Mar 24 19:25:02 server97 kernel: ip_conntrack: CT 0: table full, dropping packet.
Mar 24 19:25:07 server97 kernel: printk: 48 messages suppressed.
Mar 24 19:25:07 server97 kernel: ip_conntrack: CT 0: table full, dropping packet.
Mar 24 19:25:12 server97 kernel: printk: 51 messages suppressed.
Mar 24 19:25:12 server97 kernel: ip_conntrack: CT 0: table full, dropping packet.
Mar 24 19:25:17 server97 kernel: printk: 37 messages suppressed.
Mar 24 19:25:17 server97 kernel: ip_conntrack: CT 0: table full, dropping packet.
Mar 24 19:25:21 server97 kernel: possible SYN flooding on port 6000. Sending cookies.
Mar 24 19:25:22 server97 kernel: printk: 59 messages suppressed.
Mar 24 19:25:22 server97 kernel: ip_conntrack: CT 0: table full, dropping packet.
Mar 24 19:25:27 server97 kernel: printk: 66 messages suppressed.
Mar 24 19:25:27 server97 kernel: ip_conntrack: CT 0: table full, dropping packet.
Mar 24 19:25:32 server97 kernel: printk: 52 messages suppressed.
Mar 24 19:25:32 server97 kernel: ip_conntrack: CT 0: table full, dropping packet.
Mar 24 19:25:37 server97 kernel: printk: 41 messages suppressed.
Mar 24 19:25:37 server97 kernel: ip_conntrack: CT 0: table full, dropping packet.
Mar 24 19:25:42 server97 kernel: printk: 53 messages suppressed.
Mar 24 19:25:42 server97 kernel: ip_conntrack: CT 0: table full, dropping packet.
Mar 24 19:25:48 server97 kernel: printk: 54 messages suppressed.
Mar 24 19:25:48 server97 kernel: ip_conntrack: CT 0: table full, dropping packet.
Mar 24 19:25:52 server97 kernel: printk: 32 messages suppressed.
Mar 24 19:25:52 server97 kernel: ip_conntrack: CT 0: table full, dropping packet.
Mar 24 19:25:57 server97 kernel: printk: 49 messages suppressed.
Mar 24 19:25:57 server97 kernel: ip_conntrack: CT 0: table full, dropping packet.
Mar 24 19:26:02 server97 kernel: printk: 44 messages suppressed.
Mar 24 19:26:02 server97 kernel: ip_conntrack: CT 0: table full, dropping packet.
Mar 24 19:26:07 server97 kernel: printk: 53 messages suppressed.
Mar 24 19:26:07 server97 kernel: ip_conntrack: CT 0: table full, dropping packet.
Mar 24 19:26:12 server97 kernel: printk: 45 messages suppressed.
Mar 24 19:26:12 server97 kernel: ip_conntrack: CT 0: table full, dropping packet.
Mar 24 19:26:17 server97 kernel: printk: 42 messages suppressed.
Mar 24 19:26:17 server97 kernel: ip_conntrack: CT 0: table full, dropping packet.
Mar 24 19:26:21 server97 kernel: possible SYN flooding on port 6000. Sending cookies.
Mar 24 19:26:22 server97 kernel: printk: 35 messages suppressed.

Mar 24 19:28:02 server97 kernel: printk: 45 messages suppressed.
Mar 24 19:28:02 server97 kernel: ip_conntrack: CT 0: table full, dropping packet.
Mar 24 19:28:07 server97 kernel: printk: 24 messages suppressed.
Mar 24 19:28:07 server97 kernel: ip_conntrack: CT 0: table full, dropping packet.
Mar 24 19:28:12 server97 kernel: printk: 37 messages suppressed.
Mar 24 19:28:12 server97 kernel: ip_conntrack: CT 0: table full, dropping packet.
Mar 24 19:28:17 server97 kernel: printk: 50 messages suppressed.
Mar 24 19:28:17 server97 kernel: ip_conntrack: CT 0: table full, dropping packet.
Mar 24 22:38:12 server97 kernel: CT: 5730: stopped
Mar 24 22:38:18 server97 kernel: CT: 5730: started
Mar 24 22:43:38 server97 kernel: CT: 5730: stopped
Mar 24 22:43:38 server97 kernel: CT: 5730: started
Mar 24 22:44:17 server97 kernel: CT: 5730: stopped
Mar 24 22:44:21 server97 kernel: CT: 5730: started
Mar 24 22:45:15 server97 kernel: CT: 5730: stopped
Mar 24 22:45:15 server97 kernel: CT: 5730: started
Mar 25 00:03:29 server97 kernel: CT: 5760: started
Mar 25 00:03:29 server97 kernel: CT: 5760: stopped
Mar 25 00:03:40 server97 kernel: CT: 5760: started
Mar 25 02:04:01 server97 kernel: CT: 5765: started
Mar 25 02:04:01 server97 kernel: CT: 5765: stopped
Mar 25 02:04:09 server97 kernel: CT: 5765: started
Mar 25 02:20:55 server97 kernel: CT: 5765: stopped
Mar 25 02:22:10 server97 kernel: CT: 5765: started
Mar 25 05:08:46 server97 kernel: CT: 5770: started
Mar 25 05:09:06 server97 kernel: CT: 5770: stopped
Mar 25 05:09:08 server97 kernel: CT: 5770: started
Mar 25 05:19:02 server97 kernel: CT: 5775: started
Mar 25 05:19:02 server97 kernel: CT: 5775: stopped
Mar 25 05:19:21 server97 kernel: CT: 5775: started
Mar 25 10:14:03 server97 kernel: CT: 5775: stopped
Mar 25 10:14:04 server97 kernel: CT: 5775: started
Mar 25 10:28:43 server97 kernel: unregister_netdevice: waiting for venet0=ffff8101af91b000 to become free. Usage count = 2 ve=5705
Mar 25 10:29:24 server97 last message repeated 4 times
Mar 25 10:29:24 server97 kernel: unregister_netdevice: device ffff8101af91b000 marked to leak
Mar 25 10:29:24 server97 kernel: free_netdev: device venet0=ffff8101af91b000 leaked
Mar 25 10:29:34 server97 kernel: unregister_netdevice: waiting for lo=ffff810016475800 to become free. Usage count = 1 ve=5705
Mar 25 10:30:14 server97 last message repeated 4 times
Mar 25 10:30:15 server97 kernel: unregister_netdevice: device ffff810016475800 marked to leak
Mar 25 10:30:15 server97 kernel: free_netdev: device lo=ffff810016475800 leaked
Mar 25 10:30:15 server97 kernel: neighbour leakage

Report message to a moderator

Re: Server crashing ::ip_conntrack: CT 0: table full, dropping packet. [message #39254 is a reply to message #39190] Fri, 02 April 2010 16:15 Go to previous message
gralex is currently offline  gralex
Messages: 62
Registered: December 2008
Location: Russia, Novosibirsk
Member
Check why there are so many entries by analyzing /proc/net/ip_conntrack, and either fix the issues found (maybe somebody is attacking you), or increase /proc/sys/net/ipv4/ip_conntrack_max.

http://forum.openvz.org/index.php?t=msg&goto=37832&

P.s. поправьте меня если ошибаюсь Wink

Report message to a moderator

Previous Topic: iptables: Error inserting x_tables
Next Topic: Copying Container to new hd
Goto Forum:
  

[ Syndicate this forum (XML) ] [ RSS ] [ PDF ]

Current Time: Mon Aug 26 01:34:36 GMT 2024

Total time taken to generate the page: 0.03447 seconds
Powered by FUDforum Powered by Virtuozzo Containers