关于CL掉线问题，求助高手

kenlive5200

Nov  4 23:59:09 coyote user.warn klogd: ip_conntrack: table full, dropping packet.
Nov  5 00:03:16 coyote daemon.info thttpd[1371]: up 100805 seconds, stats for 3600 seconds:
Nov  5 00:03:16 coyote daemon.info thttpd[1371]:   thttpd - 0 connections (0/sec), 0 max simultaneous, 0 bytes (0/sec), 0 httpd_conns allocated
Nov  5 00:03:16 coyote daemon.info thttpd[1371]:   map cache - 0 allocated, 0 active (0 bytes), 0 free; hash size: 0; expire age: 1800
Nov  5 00:03:16 coyote daemon.info thttpd[1371]:   fdwatch - 730 polls (0.202778/sec)
Nov  5 00:03:16 coyote daemon.info thttpd[1371]:   timers - 3 allocated, 3 active, 0 free
Nov  5 00:05:48 coyote user.warn klogd: ip_conntrack: table full, dropping packet.
Nov  5 00:05:50 coyote user.warn klogd: ip_conntrack: table full, dropping packet.
Nov  5 00:23:51 coyote user.warn klogd: ip_conntrack: table full, dropping packet.
Nov  5 00:23:51 coyote user.warn klogd: ip_conntrack: table full, dropping packet.
Nov  5 00:23:51 coyote user.warn klogd: ip_conntrack: table full, dropping packet.
Nov  5 00:23:51 coyote user.warn klogd: ip_conntrack: table full, dropping packet.
Nov  5 00:23:53 coyote user.warn klogd: ip_conntrack: table full, dropping packet.
Nov  5 00:24:05 coyote user.warn klogd: ip_conntrack: table full, dropping packet.
Nov  5 00:24:06 coyote user.warn klogd: ip_conntrack: table full, dropping packet.
Nov  5 00:24:07 coyote user.warn klogd: ip_conntrack: table full, dropping packet.
Nov  5 00:24:08 coyote user.warn klogd: ip_conntrack: table full, dropping packet.
Nov  5 00:24:09 coyote user.warn klogd: ip_conntrack: table full, dropping packet.
Nov  5 00:24:09 coyote user.warn klogd: ip_conntrack: table full, dropping packet.
Nov  5 00:24:10 coyote user.warn klogd: ip_conntrack: table full, dropping packet.
Nov  5 00:24:10 coyote user.warn klogd: ip_conntrack: table full, dropping packet.
Nov  5 00:24:13 coyote user.warn klogd: ip_conntrack: table full, dropping packet.
Nov  5 00:24:18 coyote user.warn klogd: NET: 3 messages suppressed.
Nov  5 00:24:18 coyote user.warn klogd: ip_conntrack: table full, dropping packet.
Nov  5 00:24:29 coyote user.warn klogd: NET: 3 messages suppressed.
Nov  5 00:24:29 coyote user.warn klogd: ip_conntrack: table full, dropping packet.
Nov  5 00:24:29 coyote user.warn klogd: ip_conntrack: table full, dropping packet.
Nov  5 00:24:33 coyote user.warn klogd: ip_conntrack: table full, dropping packet.
Nov  5 00:24:37 coyote user.warn klogd: NET: 4 messages suppressed.
Nov  5 00:24:37 coyote user.warn klogd: ip_conntrack: table full, dropping packet.
Nov  5 00:24:51 coyote user.warn klogd: NET: 2 messages suppressed.
Nov  5 00:24:51 coyote user.warn klogd: ip_conntrack: table full, dropping packet.
Nov  5 00:24:52 coyote user.warn klogd: ip_conntrack: table full, dropping packet.
Nov  5 00:24:52 coyote user.warn klogd: ip_conntrack: table full, dropping packet.
Nov  5 00:52:00 coyote user.warn klogd: NET: 3 messages suppressed.
Nov  5 00:52:00 coyote user.warn klogd: ip_conntrack: table full, dropping packet.
Nov  5 00:52:08 coyote user.warn klogd: ip_conntrack: table full, dropping packet.
Nov  5 00:52:08 coyote user.warn klogd: ip_conntrack: table full, dropping packet.
Nov  5 00:52:08 coyote user.warn klogd: ip_conntrack: table full, dropping packet.
Nov  5 00:52:09 coyote user.warn klogd: ip_conntrack: table full, dropping packet.
Nov  5 00:52:09 coyote user.warn klogd: ip_conntrack: table full, dropping packet.
Nov  5 00:52:09 coyote user.warn klogd: ip_conntrack: table full, dropping packet.
Nov  5 00:52:10 coyote user.warn klogd: ip_conntrack: table full, dropping packet.
Nov  5 00:52:10 coyote user.warn klogd: ip_conntrack: table full, dropping packet.
Nov  5 00:52:10 coyote user.warn klogd: ip_conntrack: table full, dropping packet.
Nov  5 00:52:10 coyote user.warn klogd: ip_conntrack: table full, dropping packet.
Nov  5 00:52:14 coyote user.warn klogd: NET: 11 messages suppressed.
Nov  5 00:52:14 coyote user.warn klogd: ip_conntrack: table full, dropping packet.
Nov  5 00:52:18 coyote user.warn klogd: NET: 11 messages suppressed.
Nov  5 00:52:18 coyote user.warn klogd: ip_conntrack: table full, dropping packet.
Nov  5 00:52:26 coyote user.warn klogd: NET: 11 messages suppressed.
Nov  5 00:52:26 coyote user.warn klogd: ip_conntrack: table full, dropping packet.
Nov  5 00:52:29 coyote user.warn klogd: NET: 12 messages suppressed.
Nov  5 00:52:29 coyote user.warn klogd: ip_conntrack: table full, dropping packet.
Nov  5 00:52:35 coyote user.warn klogd: NET: 22 messages suppressed.
Nov  5 00:52:35 coyote user.warn klogd: ip_conntrack: table full, dropping packet.
Nov  5 00:52:40 coyote user.warn klogd: NET: 1 messages suppressed.
Nov  5 00:52:40 coyote user.warn klogd: ip_conntrack: table full, dropping packet.
Nov  5 00:52:45 coyote user.warn klogd: NET: 3 messages suppressed.
Nov  5 00:52:45 coyote user.warn klogd: ip_conntrack: table full, dropping packet.
Nov  5 00:52:49 coyote user.warn klogd: NET: 7 messages suppressed.
Nov  5 00:52:49 coyote user.warn klogd: ip_conntrack: table full, dropping packet.
Nov  5 00:52:53 coyote user.warn klogd: NET: 37 messages suppressed.
Nov  5 00:52:53 coyote user.warn klogd: ip_conntrack: table full, dropping packet.
Nov  5 00:52:58 coyote user.warn klogd: NET: 56 messages suppressed.
Nov  5 00:52:58 coyote user.warn klogd: ip_conntrack: table full, dropping packet.
Nov  5 00:53:03 coyote user.warn klogd: NET: 45 messages suppressed.
Nov  5 00:53:03 coyote user.warn klogd: ip_conntrack: table full, dropping packet.
Nov  5 00:54:18 coyote user.warn klogd: NET: 36 messages suppressed.
Nov  5 00:54:18 coyote user.warn klogd: ip_conntrack: table full, dropping packet.
Nov  5 00:54:18 coyote user.warn klogd: ip_conntrack: table full, dropping packet.
Nov  5 00:54:18 coyote user.warn klogd: ip_conntrack: table full, dropping packet.
Nov  5 00:54:19 coyote user.warn klogd: ip_conntrack: table full, dropping packet.
Nov  5 00:54:19 coyote user.warn klogd: ip_conntrack: table full, dropping packet.
Nov  5 00:54:19 coyote user.warn klogd: ip_conntrack: table full, dropping packet.
Nov  5 00:54:19 coyote user.warn klogd: ip_conntrack: table full, dropping packet.
Nov  5 00:54:19 coyote user.warn klogd: ip_conntrack: table full, dropping packet.
Nov  5 00:54:20 coyote user.warn klogd: ip_conntrack: table full, dropping packet.
Nov  5 00:54:21 coyote user.warn klogd: ip_conntrack: table full, dropping packet.
Nov  5 00:54:38 coyote user.warn klogd: NET: 9 messages suppressed.
Nov  5 00:54:38 coyote user.warn klogd: ip_conntrack: table full, dropping packet.
Nov  5 00:54:38 coyote user.warn klogd: ip_conntrack: table full, dropping packet.
Nov  5 00:54:38 coyote user.warn klogd: ip_conntrack: table full, dropping packet.
Nov  5 00:54:38 coyote user.warn klogd: NET: 2 messages suppressed.
Nov  5 00:54:38 coyote user.warn klogd: ip_conntrack: table full, dropping packet.
Nov  5 00:54:44 coyote user.warn klogd: NET: 10 messages suppressed.
Nov  5 00:54:44 coyote user.warn klogd: ip_conntrack: table full, dropping packet.
Nov  5 00:54:49 coyote user.warn klogd: NET: 21 messages suppressed.
Nov  5 00:54:49 coyote user.warn klogd: ip_conntrack: table full, dropping packet.
Nov  5 00:54:54 coyote user.warn klogd: NET: 27 messages suppressed.
Nov  5 00:54:54 coyote user.warn klogd: ip_conntrack: table full, dropping packet.
Nov  5 00:54:57 coyote user.debug klogd: e100: eth1: e100_wait_exec_simple: failed
Nov  5 00:56:00 coyote user.debug klogd: e100: eth1: e100_wait_exec_simple: failed


以上的日志帮忙分析一下，我的CL每隔两天就会掉一次线。

芝麻

应该是有病毒,你试试在rc.local中加入下面的语句:
iptables -A FORWARD -p tcp --dport 135:139 -j DROP
iptables -A FORWARD -p tcp --dport 445 -j DROP

kenlive5200

难道是内网某一台客户机中毒了?

kenlive5200

问题还没解决，希望高手跟进。。。在线等待

芝麻

在rc.local中再加入:
echo 16384 > /proc/sys/net/ipv4/ip_conntrack_max
echo 600 > /proc/sys/net/ipv4/netfilter/ip_conntrack_tcp_timeout_established
我以前也遇到你一样的问题,我没有加入上面两句话,而是在一台客户机上抓包,发现很多445.139的包,DROP掉就没问题了,现在网关已连续运行了156天没问题了,拖300台机左右.网上高人说换网卡的驱动程序也管用,但我没用过,也没出过问题.用的是BFW2.30.

kenlive5200

楼上朋友方便加我QQ指点一下吗，我对CL不是很了解，新手上路呢 QQ:11380052