ip_conntrack or nf_conntrack : table full, dropping packet

Solution Verified - Updated -

Issue

  • What do the following messages in the system log mean?
ip_conntrack: table full, dropping packet.
nf_conntrack: table full, dropping packet.
  • Packet drops on this system for connections using ip_conntrack or nf_conntrack iptables modules.
  • Messages seen in /var/log/messages on the compute nodes when one of the instances drops packets

Environment

  • Red Hat Enterprise Linux 7
  • Red Hat Enterprise Linux 6
  • Red Hat Enterprise Linux 5
  • iptables firewall with connection tracking

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase of over 48,000 articles and solutions.

Current Customers and Partners

Log in for full access

Log In