I've see the following in my logs every so often:
kernel: ip_conntrack: table full, dropping packet.
Currently, I have ip_conntrack_max set to 65536 (default, RHEL5).
Keeping memory usage in mind, how much can I safely increase this value? I've got 4GB ram on this box. One of the functions this machine serves is as a static content server, which probably explains the high connections counts, and also means I'd like to keep as much of the OS memory used for caching as possible.
Also, what's the difference between the following two? /proc/sys/net/ipv4/netfilter/ip_conntrack_max /proc/sys/net/ipv4/ip_conntrack_max
Which should I be editing?