kernel: ip_conntrack: table full, dropping packet.

Linux AS 5.3  64bit,    Oracle 10.2.0.4 ,   4nodes RAC  


这是在节点3上看到的linux log ,  

Oct 24 04:03:01 mxrac03 syslogd 1.4.1: restart.
Oct 25 10:36:01 mxrac03 auditd[7487]: Audit daemon rotating log files
Oct 25 11:22:48 mxrac03 kernel: printk: 569 messages suppressed.
Oct 25 11:22:48 mxrac03 kernel: ip_conntrack: table full, dropping packet.

Oct 25 11:22:59 mxrac03 last message repeated 3 times
Oct 25 23:29:12 mxrac03 gconfd (oracle-32725): starting (version 2.14.0), pid 32725 user 'oracle'
Oct 25 23:29:12 mxrac03 gconfd (oracle-32725): Resolved address "xml:readonly:/etc/gconf/gconf.xml.mandatory" to a read-
only configuration source at position 0
Oct 25 23:29:12 mxrac03 gconfd (oracle-32725): Resolved address "xml:readwrite:/home/oracle/.gconf" to a writable
configuration source at position 1
Oct 25 23:29:12 mxrac03 gconfd (oracle-32725): Resolved address "xml:readonly:/etc/gconf/gconf.xml.defaults" to a read-only
configuration source at position 2
Oct 25 23:29:12 mxrac03 gconfd (oracle-32725): Resolved address "xml:readwrite:/home/oracle/.gconf" to a writable
configuration source at position 0
Oct 25 23:29:13 mxrac03 pcscd: winscard.c:304:SCardConnect() Reader E-Gate 0 0 Not Found


搜到的一些解决方法,但是没有搞清楚之前不敢随意更改。不同的系统压力,不同的硬件配置, 使用什么规律调整下面的值 ?   会不会造成系统
不能正常开启或其他更加严重的问题 ?   




http://www.ixdba.net/article/c7/2012.html

系统报:
Apr 17 16:37:26 www kernel: printk: 135 messages suppressed.
Apr 17 16:37:26 www kernel: ip_conntrack: table full, dropping packet.
Apr 17 16:37:26 www kernel: ip_conntrack: table full, dropping packet.
Apr 17 16:37:33 www kernel: printk: 139 messages suppressed.
Apr 17 16:37:33 www kernel: ip_conntrack: table full, dropping packet.
Apr 17 16:37:37 www kernel: printk: 60 messages suppressed.
Apr 17 16:37:37 www kernel: ip_conntrack: table full, dropping packet.
Apr 17 16:37:52 www kernel: printk: 19 messages suppressed.
Apr 17 16:37:52 www kernel: ip_conntrack: table full, dropping packet.

有丢包现象

[root@www ~]# wc -l /proc/net/ip_conntrack
68463 /proc/net/ip_conntrack

[root@www ~]# cat /proc/sys/net/ipv4/netfilter/ip_conntrack_max
65536

可调整以下参数:

echo 180 > /proc/sys/net/ipv4/netfilter/ip_conntrack_tcp_timeout_established
echo 262144 > /proc/sys/net/ipv4/netfilter/ip_conntrack_max
echo 120   > /proc/sys/net/ipv4/neigh/default/gc_stale_time
echo 1024 > /proc/sys/net/ipv4/neigh/default/gc_thresh1
echo 4096 > /proc/sys/net/ipv4/neigh/default/gc_thresh2
echo 8192 > /proc/sys/net/ipv4/neigh/default/gc_thresh3

vi /etc/sysctl.conf

net.ipv4.ip_conntrack_max = 655360
net.ipv4.netfilter.ip_conntrack_tcp_timeout_established = 180


sysctl -p
请使用浏览器的分享功能分享到微信等