(triggered by packet B) > tcp 6 30 LAST_ACK. > Follwing changes fix it: > - set loose=0 (avoids bogus NEW connection), OR, > - set _conntrack_tcp_timeout_close_wait=65 > (avoids NEW connection, new state transitions are: > tcp 6 60 CLOSE_WAIT. (triggered by packet D) > Result is that, after a couple of hours, conntrack table starts to fill up > with UNREPLIED crud. (triggered by packet B) > tcp 6 (triggered by 60-second CLOSE_WAIT timeout) > tcp 6 432034 ESTABLISHED. (triggered by packet A) > tcp 6 60 CLOSE_WAIT. > From conntrack POV, we have following state transitions: > tcp 6 60 SYN_RECV. , ack 9238 win 255 > D is last packet seen for that connection. Is this necessary? > I ask, because I've got following tcp trace: > is initiator/origin, 10.184. > With nf_conntrack_tcp_loose = 1, stray packets will create > conntrack with 5 days-timeout. On Thu, at 12:51:38PM +0200, Florian Westphal wrote: The body of a message to majordomo info at To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in Jozsef, If you aggree I would make a formal submission. Up connection with default ESTABLISHED timeout value. However, I think conntrack shouldn't insert a just-picked (avoids NEW connection, new state transitions are: set _conntrack_tcp_timeout_close_wait=65 set loose=0 (avoids bogus NEW connection), OR, Result is that, after a couple of hours, conntrack table starts to fill up tcp 6 (triggered by 60-second CLOSE_WAIT timeout) Notice 61 second pause between B and C.įrom conntrack POV, we have following state transitions: , ack 9238 win 255ĭ is last packet seen for that connection. I ask, because I've got following tcp trace:ġ92.168.x is initiator/origin, 10.184.
With nf_conntrack_tcp_loose = 1, stray packets will createĬonntrack with 5 days-timeout. To: Huge timeout with loose=1 pickup tcp connectionsĬontent-Type: text/plain charset=us-ascii
Received: from fw by with local (Exim 4.72) Received: from (:39936 "EHLOĬ" rhost-flags-OK-OK-OK-OK)īy with ESMTP id S1756027Ab3FMKvk (ORCPT
X-Original-To: from ( )īy (Postfix) with ESMTP id C19212C009E
0 kommentar(er)
