how to change nf_conntrack_max value.....

dashang.trivedi · 08-27-2011, 07:24 AM

i want to change nf_conntrack_max value....

i have search in google. i find out that to change the value of nf_conntrack_max ...

/sbin/sysctl -w net.netfilter.nf_conntrack_max = 196608

but its give me error...

Code:

[root@manage /root]# /sbin/sysctl -w net.netfilter.nf_conntrack_max = 196608
error: "net.netfilter.nf_conntrack_max" must be of the form name=value
error: Malformed setting "="
error: "196608" must be of the form name=value

please tell me how to change value of max conntrack ....

Karl Godt · 08-27-2011, 09:44 AM

The kernel 2.6.30.x gave me some deprecated warnings about nf_conntrack which showed up via the dmesg command .
The suggested kernel parameters seemed not to work for me so I left it as it had been .

About the syntax for the sysctl command I would suggest something like

Code:

/sbin/sysctl -w net.netfilter.nf_conntrack_max=196608

bash mostly does not like ' = ' spaces before and after the equal sign , with an exception for example for the builtin test/[ ] ; unlike C .

example : if [ "$TheVar" = "" ] ; then echo 'The variable $TheVar is empty , even without spaces or tabs !' ; fi

dashang.trivedi · 08-29-2011, 12:39 AM

thanxx sir its work.........

dashang.trivedi · 08-29-2011, 02:06 AM

hi sir...
one more problem is there...i got error when i set buckets..

Code:

[root@manage /root]# /sbin/sysctl -w net.netfilter.nf_conntrack_buckets=196608
error: permission denied on key 'net.netfilter.nf_conntrack_buckets'

my question is nf_conntrack_buckets and nf_conntrack_max ....can be equal?????
or its depends on ram size....

its create confusion to understanding nf_conntrack_max and nf_conntrack_buckets....

i want to improve my server performance because some times its give conntrack is full...server have 4gb ram