Troubleshooting stability issue

Jan Engelhardt jengelh at
Thu Aug 11 08:00:32 CEST 2005

>Symptom is that by the time we get to it, the box is totally unresponsive to 
>local console, is not forwarding packets. In a word "hung".

Then there may be a memory leak. Calm all apps and periodically check the free 
ram or the slab cache sizes, respectively. (Yeah, it's unlikely.)

Check /var/log/messages if it says that a network card timed out.

>Memory isn't obviously leaking.
>The number of lines in "ip_conntrack" does appear to grow with time, but is 
>still way below (at around 3000) the maximum allowed of 32,000+, and isn't 
>growing monotonically. I think there may be clues here, if only to what is 
>wrong with the ruleset.

Reduce the maximum number of conntracks then.

>Apart from sshd, there is practically nothing running.
>inetd (this has nothing configured in /etc/inetd.conf, so I'll remove it).
>Postfix is listening on in case anything local suddenly needs to 
>report anything to me.
>lpd (lpd was running and not listening on any ports, so I'll remove it).

Where's the ftpd?

>Just looking for some helpful pointers on how to investigate this issue 


>The hardware doesn't seem to like the stock 2.6 kernels, and I don't have one 
>spare to spend time figuring out why.
Forgot a driver?

Jan Engelhardt
| Alphagate Systems,

More information about the netfilter mailing list