Issue

• Following message is seen in logs kernel: nf_conntrack: table full, dropping packet . Refer kbase-48033 for more information on these messages.
• Increasing the value of sysctl parameter net.netfilter.nf_conntrack_max can help to keep track of more number of connections, but as increasing this value comes with the overhead of more memory consumption, so before increasing the value of that parameter need to find out how much memory/RAM gets consumes when the default max value of that parameter (65536) is reached ?
• How much memory is required to keep track of each entry in conntrack table ?
• Based on this information and considering the availability of physical RAM on the system, appropriate new value for the parameter can be decided.