sosreport loads the bridge kernel module unintentionally, which sets net.bridge.bridge-nf-call-arptables = 1

Solution Verified - Updated -

Issue

  • When sosreport is run, some kernel modules are loaded as a side effect; the loading of unwanted kernel modules consumes memory and may cause other issues
  • The output of sysctl -a changes after a run of sosreport due to the bridge kernel module being loaded
  • The bridge module's sysctls are initialized to their defaults, instead of being properly initialized via /etc/sysctl.conf
  • Despite not having any bridge interfaces configured, you find you have these set in sysctl -a output:
net.bridge.bridge-nf-call-arptables = 1
net.bridge.bridge-nf-call-iptables = 1
net.bridge.bridge-nf-call-ip6tables = 1

Environment

  • Red Hat Enterprise Linux 6

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase of over 48,000 articles and solutions.

Current Customers and Partners

Log in for full access

Log In