conntrack_tcp

This module tracks TCP connections based on the source and destination ports. It has many timers. Make sure you know what you are doing before changing them.

  • syn_sent_timer

Specifies after how many seconds we assume a connection is closed or unresponsive after a TCP SYN was sent but none was received.
Default : 180 seconds

  • syn_recv_timer

Specifies after how many seconds we assume a connection is closed or unresponsive after a TCP SYN was sent and received but no further packet is exchanged.
Default : 60 seconds

  • last_ack_timer

Specifies after how many seconds we assume a connection is closed or unresponsive after a TCP FIN was received in both directions and no further packet is exchanged.
Default : 30 seconds

  • close_timer

Specifies after how many seconds we assume a connection is closed or unresponsive after a TCP RST was received and no further packet is exchanged.
Default : 10 seconds

  • time_wait_timer

Specifies how long we wait for remaining packets on the network after a TCP connection has been closed.
Default : 180 seconds

  • established_timer

Specifies how long we keep informations about an established TCP connection while no further packets are exchanged.
Default : 7200 seconds

  • enable_reuse_handling

Enable or disable handling of reused connections. Those connections violate the RFC in a way that the same source and destination ports are reused within the two minutes after the connection has been closed. Please note that the SYN packet will be handled as a packet from the first connection.
Default : no

 
conntrack_tcp.txt · Last modified: 2010/12/22 08:55 by gmsoft
 
Except where otherwise noted, content on this wiki is licensed under the following license:CC Attribution-Noncommercial-Share Alike 3.0 Unported
Recent changes RSS feed Donate Powered by PHP Valid XHTML 1.0 Valid CSS Driven by DokuWiki