ip_conntrack or nf_conntrack : table full, dropping packet
Issue
- What do the following messages in the system log mean?
ip_conntrack: table full, dropping packet.
nf_conntrack: table full, dropping packet.
- Packet drops on this system for connections using
ip_conntrackornf_conntrackiptables modules. - Messages seen in
/var/log/messageson the compute nodes when one of the instances drops packets
Environment
- Red Hat Enterprise Linux 7
- Red Hat Enterprise Linux 6
- Red Hat Enterprise Linux 5
iptablesfirewall with connection tracking
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase of over 48,000 articles and solutions.
Welcome! Check out the Getting Started with Red Hat page for quick tours and guides for common tasks.
