crazy ESTB timeouts!

Raj list@mail.com.np
Tue, 1 Jan 2002 18:27:11 +0545 (NPT)


HI, I have noticed another instance of crazy timeout values in the
/proc/net/ip_conntrack file for some of ESTB conns.
The timeout value increases instead of decrease as time goes by.
My default timeout is 7200 secs.

1. presently...
tcp      6 7199 ESTABLISHED src=202.161.x.x dst=202.52.x.x
sport=1046 dport=91 src=202.52.x.x dst=202.161.x.x sport=91
dport=1046 [ASSURED] use=1

2. decreases...
tcp      6 7198 ESTABLISHED src=202.161.x.x dst=202.52.x.x
sport=1046 dport=91 src=202.52.x.x dst=202.161.x.x sport=91
dport=1046 [ASSURED] use=1

3. increases...
tcp      6 7199 ESTABLISHED src=202.161.x.x dst=202.52.x.x
sport=1046 dport=91 src=202.52.x.x dst=202.161.x.x sport=91
dport=1046 [ASSURED] use=1

4. decreases...
tcp      6 7198 ESTABLISHED src=202.161.x.x dst=202.52.x.x
sport=1046 dport=91 src=202.52.x.x dst=202.161.x.x sport=91
dport=1046 [ASSURED] use=1

5. increases...
tcp      6 7199 ESTABLISHED src=202.161.x.x dst=202.52.x.x
sport=1046 dport=91 src=202.52.x.x dst=202.161.x.x sport=91
dport=1046 [ASSURED] use=1

6. the entry just disappears after sometime...it should have only after
~7000 secs right!

7. Sometimes the timeout even remains constant for some time instead of
decreasing with time!

I just could not understand this STRANGE phenomena at all...

Is this a bug or a normal behaviour of iptables 1.2.4/p-o-m over
RH 7.2/2.4.9-13custom ?

Cheers,
Raj