Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I recently installed CSF firewall. Immediately after this, my Munin has stopped showing me graphs for Connections through firewall and ipconntrack. I looked into log files and found this

2011/02/27-19:45:01 CONNECT TCP Peer: "" Local: ""
2011/02/27-19:45:16 [18459] Service 'fw_conntrack' timed out.
2011/02/27-19:45:29 [18459] Service 'fw_forwarded_local' timed out.

Any help as to whats happening? How can I debug this further


share|improve this question
I have the same problem but only when the server is overloaded and has 65k connections in TIME_WAIT – Janning May 16 '11 at 7:05

Look like Munin can not access to /proc/net/nf_conntrack.

Check /proc/net/nf_conntrack:

ls -al /proc/net/nf_conntrack
-r--r----- 1 root root 0 Фев 27 21:14 /proc/net/nf_conntrack
at /proc/net/nf_conntrack | head
ipv4     2 tcp      6 114 TIME_WAIT src=x.x.x.x dst=x.x.x.x sport=43431 dport=10050 packets=5 bytes=289 src=x.x.x.x dst=x.x.x.x sport=10050 dport=43431 packets=5 bytes=291 [ASSURED] mark=0 secmark=0 use=1

Also check nf_conntrack kernel module:

 lsmod | grep nf_conntrack
 nf_conntrack           82688  13 nf_nat_irc,nf_nat_ftp,xt_state,xt_helper,xt_conntrack,nf_conntrack_irc,nf_conntrack_ftp,iptable_nat,xt_NOTRACK,nf_conntrack_proto_udplite,nf_conntrack_netlink,nf_nat,nf_conntrack_ipv4
share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.