ip_conntrack or nf_conntrack : table full, dropping packet

Solution Verified - Updated -

Issue

  • What do the following messages in the system log mean?
ip_conntrack: table full, dropping packet.
nf_conntrack: table full, dropping packet.
  • Packet drops on this system for connections using ip_conntrack or nf_conntrack iptables modules.
  • Messages seen in /var/log/messages on the compute nodes when one of the instances drops packets

Environment

  • Red Hat Enterprise Linux 7
  • Red Hat Enterprise Linux 6
  • Red Hat Enterprise Linux 5
  • iptables firewall with connection tracking

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase of over 48,000 articles and solutions.

Current Customers and Partners

Log in for full access

Log In
Close

Welcome! Check out the Getting Started with Red Hat page for quick tours and guides for common tasks.