[squid-users] WCCP Transparent Proxy on High Volume network

Hi,

I had to start squid in prodcution network and to my supprise, it
worked for about 1 minute, and then the messages bellow started
flowing. In the WCCP router, more 10000 requests were forwarded
after less than 1 minute!!!! (192.x.x.x/19 network)

I noticed that cache server ran out of file descriptors, How to fix this ?

How do I tune ip_conntack table ? My actual max value is:
[root@cache ~]# cat /proc/sys/net/ipv4/ip_conntrack_max
65536

Thanks for your answers

Dan

---------------------------
ip_conntrack: table full, dropping packet.
ip_conntrack: table full, dropping packet.
ip_conntrack: table full, dropping packet.
ip_conntrack: table full, dropping packet.
ip_conntrack: table full, dropping packet.
ip_conntrack: table full, dropping packet.
ip_conntrack: table full, dropping packet.
ip_conntrack: table full, dropping packet.
ip_conntrack: table full, dropping packet.
ip_conntrack: table full, dropping packet.
ip_conntrack: table full, dropping packet.
printk: 23 messages suppressed.
ip_conntrack: table full, dropping packet.
printk: 26 messages suppressed.
ip_conntrack: table full, dropping packet.
printk: 29 messages suppressed.
ip_conntrack: table full, dropping packet.
printk: 47 messages suppressed.
ip_conntrack: table full, dropping packet.
printk: 40 messages suppressed.
ip_conntrack: table full, dropping packet.
printk: 53 messages suppressed.
ip_conntrack: table full, dropping packet.
printk: 64 messages suppressed.
ip_conntrack: table full, dropping packet.
printk: 51 messages suppressed.
ip_conntrack: table full, dropping packet.
printk: 62 messages suppressed.
ip_conntrack: table full, dropping packet.
printk: 74 messages suppressed.
ip_conntrack: table full, dropping packet.
printk: 74 messages suppressed.
ip_conntrack: table full, dropping packet.
printk: 60 messages suppressed.
ip_conntrack: table full, dropping packet.
printk: 76 messages suppressed.
ip_conntrack: table full, dropping packet.
printk: 65 messages suppressed.
ip_conntrack: table full, dropping packet.
printk: 92 messages suppressed.
ip_conntrack: table full, dropping packet.
printk: 68 messages suppressed.
ip_conntrack: table full, dropping packet.
printk: 66 messages suppressed.
ip_conntrack: table full, dropping packet.
printk: 70 messages suppressed.
ip_conntrack: table full, dropping packet.
printk: 86 messages suppressed.
ip_conntrack: table full, dropping packet.
printk: 55 messages suppressed.
ip_conntrack: table full, dropping packet.
printk: 68 messages suppressed.
ip_conntrack: table full, dropping packet.
printk: 59 messages suppressed.
ip_conntrack: table full, dropping packet.
printk: 65 messages suppressed.
ip_conntrack: table full, dropping packet.
printk: 77 messages suppressed.
ip_conntrack: table full, dropping packet.
printk: 86 messages suppressed.
ip_conntrack: table full, dropping packet.
printk: 75 messages suppressed.
ip_conntrack: table full, dropping packet.
printk: 75 messages suppressed.
ip_conntrack: table full, dropping packet.
printk: 62 messages suppressed.
ip_conntrack: table full, dropping packet.
printk: 55 messages suppressed.
ip_conntrack: table full, dropping packet.
printk: 85 messages suppressed.
ip_conntrack: table full, dropping packet.
printk: 79 messages suppressed.
ip_conntrack: table full, dropping packet.
ip_tables: (C) 2000-2002 Netfilter core team
ip_conntrack version 2.1 (8192 buckets, 65536 max) - 340 bytes per conntrack
printk: 19 messages suppressed.
TCP: drop open request from IP/2930
TCP: drop open request from IP/1194
TCP: drop open request from IP/33930
TCP: drop open request from IP/2009
TCP: drop open request from IP/2854
TCP: drop open request from IP/65478
TCP: drop open request from IP/33084
TCP: drop open request from IP/1556
TCP: drop open request from IP/2291
TCP: drop open request from IP/63561
printk: 24 messages suppressed.
TCP: drop open request from IP/2697
TCP: drop open request from IP/1193
printk: 158 messages suppressed.
TCP: drop open request from IP/2582
printk: 124 messages suppressed.
TCP: drop open request from IP/4681
printk: 35 messages suppressed.

--
--------------------------
Daniel Epee Lea