tu akurat w delu wielkiego wyboru nie miałem :/

 

#v+
marcin@john ~ $ sudo ethtool -S eth0
NIC statistics:
     rx_bytes: 58005926010809
     rx_error_bytes: 0
     tx_bytes: 18667787068096
     tx_error_bytes: 0
     rx_ucast_packets: 56839575326
     rx_mcast_packets: 2332968
     rx_bcast_packets: 2962157
     tx_ucast_packets: 44935029155
     tx_mcast_packets: 2170338
     tx_bcast_packets: 9797
     tx_mac_errors: 0
     tx_carrier_errors: 0
     rx_crc_errors: 1
     rx_align_errors: 0
     tx_single_collisions: 0
     tx_multi_collisions: 0
     tx_deferred: 0
     tx_excess_collisions: 0
     tx_late_collisions: 0                                                                           
     tx_total_collisions: 0                                                                          
     rx_fragments: 0                                                                                  
     rx_jabbers: 0                                                                                    
     rx_undersize_packets: 0                                                                          
     rx_oversize_packets: 0                                                                           
     rx_64_byte_packets: 367041689                                                                     
     rx_65_to_127_byte_packets: 1225421409                                                             
     rx_128_to_255_byte_packets: 2592733732                                                            
     rx_256_to_511_byte_packets: 1329502955                                                              
     rx_512_to_1023_byte_packets: 1499934579                                                             
     rx_1024_to_1522_byte_packets: 2585595831                                                            
     rx_1523_to_9022_byte_packets: 0                                                                     
     tx_64_byte_packets: 4447905834                                                                      
     tx_65_to_127_byte_packets: 4143193460                                                               
     tx_128_to_255_byte_packets: 2085872403                                                              
     tx_256_to_511_byte_packets: 862181329                                                               
     tx_512_to_1023_byte_packets: 1787247660                                                             
     tx_1024_to_1522_byte_packets: 1546037532                                                            
     tx_1523_to_9022_byte_packets: 0                                                                     
     rx_xon_frames: 0                                                                                    
     rx_xoff_frames: 0                                                                                   
     tx_xon_frames: 0
     tx_xoff_frames: 0
     rx_mac_ctrl_frames: 0
     rx_filtered_packets: 1811098
     rx_ftq_discards: 0
     rx_discards: 0
     rx_fw_discards: 60564057
#v-

od momentu zmian ta wartość (rx_fw_discards: 60564057) wydaje mi się nie zmieniona.
ifconfig terz pokazuje 605745581 i tu rośnie :/

 

jeśli chodzi o wpisy w nf_conntrack to mam tak:
#v+
net.netfilter.nf_conntrack_generic_timeout = 600
net.netfilter.nf_conntrack_tcp_timeout_syn_sent = 120
net.netfilter.nf_conntrack_tcp_timeout_syn_recv = 60
net.netfilter.nf_conntrack_tcp_timeout_established = 7200
net.netfilter.nf_conntrack_tcp_timeout_fin_wait = 120
net.netfilter.nf_conntrack_tcp_timeout_close_wait = 60
net.netfilter.nf_conntrack_tcp_timeout_last_ack = 30
net.netfilter.nf_conntrack_tcp_timeout_time_wait = 120
net.netfilter.nf_conntrack_tcp_timeout_close = 10
net.netfilter.nf_conntrack_tcp_timeout_max_retrans = 300
net.netfilter.nf_conntrack_tcp_timeout_unacknowledged = 300
net.netfilter.nf_conntrack_tcp_loose = 1
net.netfilter.nf_conntrack_tcp_be_liberal = 0
net.netfilter.nf_conntrack_tcp_max_retrans = 3
net.netfilter.nf_conntrack_udp_timeout = 30
net.netfilter.nf_conntrack_udp_timeout_stream = 180
net.netfilter.nf_conntrack_icmp_timeout = 30
net.netfilter.nf_conntrack_icmpv6_timeout = 30
net.netfilter.nf_conntrack_frag6_timeout = 60
net.netfilter.nf_conntrack_frag6_low_thresh = 196608
net.netfilter.nf_conntrack_frag6_high_thresh = 262144
net.netfilter.nf_conntrack_acct = 0
net.netfilter.nf_conntrack_timestamp = 0
net.netfilter.nf_conntrack_events = 1
net.netfilter.nf_conntrack_events_retry_timeout = 15
net.netfilter.nf_conntrack_max = 262144
net.netfilter.nf_conntrack_count = 123059
net.netfilter.nf_conntrack_buckets = 16384
net.netfilter.nf_conntrack_checksum = 1
net.netfilter.nf_conntrack_log_invalid = 0
net.netfilter.nf_conntrack_expect_max = 256
net.nf_conntrack_max = 262144
#v+

Dzięki za zainteresowanie.