On Wed, 12 Jan 2005 21:31:53 +0200, Kimmo Koivisto <kimmo.koivisto@xxxxxxxxx> wrote: > Sometimes (couple times in a month) network freezes and I get the following > errors in /var/log/messages: > ... > Jan 10 21:13:05 testfw kernel: dst cache overflow > ... > I guess it's something nat/connection tracking related? I have checked out the > number of lines in /proc/net/ip_conntrack during the freezes, last time there > were 241 lines (wc -l /proc/net/ip_conntrack). What's your ip_conntrack_max set to? cat /proc/sys/net/ipv4/netfilter/ip_conntrack_max You might also be able to learn something from grep conntrack /proc/slabinfo -- Deron Meranda