Xen users - Nov 2009 - table full, dropping packet in xen

Hello,
Recently one of our server have faced network issue,
from the log I got this message: ip_conntrack: table full, dropping packet.

I have tried to disable the iptables, but seems a few hours later, the
iptables will start again, and later, the packet dropping again.

Any one know how to fully disable the iptables?

I''m running CentOS 5.4 with Xen 3.4.1

Thanks.

_______________________________________________
Xen-users mailing list
Xen-users@lists.xensource.com
http://lists.xensource.com/xen-users

Jingyun He <jingyun.ho@gmail.com> writes:
> Recently one of our server have faced network issue,
> from the log I got this message: ip_conntrack: table full, dropping packet.
Your dom0 probably tries to track (needlessly) all connections of all
domUs running on it.  If your network is bridged, check
/proc/sys/net/bridge/bridge-nf-call-iptables and friends.
-- 
Feri.

_______________________________________________
Xen-users mailing list
Xen-users@lists.xensource.com
http://lists.xensource.com/xen-users