search for: insert_fail

...most of the operations, it can be especially bad. In the example below there are many instances where the higher values from the second processor are unaccounted for. cat /proc/net/stat/nf_conntrack; sudo -u nobody conntrack -S entries searched found new invalid ignore delete delete_list insert insert_failed drop early_drop icmp_error expect_new expect_create expect_delete search_restart 0000014b 004cfa4f 04e9e53e 0049ce54 0000f543 006fd72d 005cfde7 0045abc6 0032596c 00000007 00000000 00000000 0000023f 00000001 00000002 00000001 00000000 0000014b 0328b028 38a17c68 03934d68 000db985 00c66dbf 03801...

.../proc/net/stat/nf_conntrack): # conntrack -S entries 9 searched 22 found 98143 new 1844 invalid 2 ignore 120 delete 1872 delete_list 1144 insert 1116 insert_failed 0 drop 0 early_drop 0 icmp_error 0 expect_new 0 expect_create 0 expect_delete 0 = userspace daemon: conntrackd = * Add the new generic infrastructure to allow using different protocols to replicate state-cha...

https://bugzilla.netfilter.org/show_bug.cgi?id=1766 Bug ID: 1766 Summary: nfqueue randomly drops packets with same tuple Product: netfilter/iptables Version: unspecified Hardware: x86_64 OS: All Status: NEW Severity: major Priority: P5 Component: netfilter hooks Assignee: