kernel-packages team mailing list archive
-
kernel-packages team
-
Mailing list archive
-
Message #44199
[Bug 1270237] Re: prevent the conntrack table from filling up in the kernel
** Also affects: linux-lts-raring (Ubuntu)
Importance: Undecided
Status: New
** Changed in: linux-lts-raring (Ubuntu Precise)
Importance: Undecided => Medium
** Changed in: linux-lts-raring (Ubuntu Precise)
Assignee: (unassigned) => Chris J Arges (arges)
** Changed in: linux (Ubuntu Raring)
Assignee: Chris J Arges (arges) => (unassigned)
** Changed in: linux-lts-raring (Ubuntu Quantal)
Status: New => Invalid
** Changed in: linux-lts-raring (Ubuntu)
Status: New => Invalid
** Changed in: linux-lts-raring (Ubuntu Raring)
Status: New => Invalid
** Changed in: linux (Ubuntu Raring)
Status: In Progress => Invalid
** Changed in: linux (Ubuntu Precise)
Status: In Progress => Fix Committed
** Changed in: linux (Ubuntu Quantal)
Status: In Progress => Fix Committed
** Changed in: linux-lts-raring (Ubuntu Precise)
Status: New => Fix Committed
--
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1270237
Title:
prevent the conntrack table from filling up in the kernel
Status in “linux” package in Ubuntu:
Fix Released
Status in “linux-lts-raring” package in Ubuntu:
Invalid
Status in “linux” source package in Precise:
Fix Committed
Status in “linux-lts-raring” source package in Precise:
Fix Committed
Status in “linux” source package in Quantal:
Fix Committed
Status in “linux-lts-raring” source package in Quantal:
Invalid
Status in “linux” source package in Raring:
Invalid
Status in “linux-lts-raring” source package in Raring:
Invalid
Bug description:
[Impact]
When running a server for an extended amount of time the conntrack table can fill up.
Here is the netfilter discussion: http://www.spinics.net/lists/netfilter-devel/msg26759.html
[Fix]
https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=6547a221871f139cc56328a38105d47c14874cbe
Present in 3.11 >
[Test Case]
From the patch:
When loose tracking is enabled (default), non-syn packets cause
creation of new conntracks in established state with default timeout for
established state (5 days). This causes the table to fill up with UNREPLIED
when the 'new ack' packet happened to be the last-ack of a previous,
already timed-out connection.
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1270237/+subscriptions
References