"nf_conntrack: table full, dropping packet" Displayed in the dmesg Logs

Symptom

A message "nf_conntrack: table full, dropping packet" is displayed in the dmesg logs.

Key Process and Cause Analysis

The nf_conntrack tracking table is full.

Conclusion and Solution

Set the maximum number of connection tracking in the Linux OS to 0, that is, disable the connection tracking function.

1. Add the following code to the kernel configuration file /etc/sysctl.conf:

   net.netfilter.nf_conntrack_max=0
   net.nf_conntrack_max=0

2. Make the configuration take effect.

   sysctl -p