Community discussions

MikroTik App
 
User avatar
docmarius
Forum Guru
Forum Guru
Topic Author
Posts: 1224
Joined: Sat Nov 06, 2010 12:04 pm
Location: Timisoara, Romania
Contact:

Connection tracking counters wrong

Fri Feb 20, 2015 5:48 pm

I do some forwarding for ip proto 4 and 93 from my external interface to a server using DST-NAT.
The connections set the Unreplied flag if not in use anymore.
The strange issue is that connection counters, after counting down the set timeout will roll over at 0 and start counting up, without dropping the connections when reaching 0.
The result is that the connection stays there forever.
Tracking_counters.png
This happens for all protocols (ipencap, axip, gre) except TCP and mostly for UDP.
The issue is that for that specific IP pair, communication is not possible anymore.
Deleting the entry will return function to normal until that state is reached again.
Data flow using that pair does not update the counter to the timeout value.
Checked it on 6.25 and 6.27 (is is the same).

On 6.20 this seems to work properly.
Connections in the unreplied state time out and get removed from the connection tracking list.
The up counting appears only if that connection has traffic and need to stay up.

LE: It seems that setting tracking to "yes" instead of "auto" cures the issue.

Is this a correct behavior or a bug?
You do not have the required permissions to view the files attached to this post.
 
pe1chl
Forum Guru
Forum Guru
Posts: 10672
Joined: Mon Jun 08, 2015 12:09 pm

Re: Connection tracking counters wrong

Sat Jul 18, 2015 11:46 pm

Where did you set "tracking" to "yes"? I cannot locate this setting...
 
User avatar
docmarius
Forum Guru
Forum Guru
Topic Author
Posts: 1224
Joined: Sat Nov 06, 2010 12:04 pm
Location: Timisoara, Romania
Contact:

Re: Connection tracking counters wrong

Sun Jul 19, 2015 1:49 pm

If I remember correctly, it is under IP->Settings. Sorry but I can not reach my router until next week.
 
jarda
Forum Guru
Forum Guru
Posts: 7756
Joined: Mon Oct 22, 2012 4:46 pm

Mon Jul 20, 2015 8:34 am

It's tracking button on connection tab of firewall. See the picture two posts above.
Interesting idea with yes instead auto to tracking. Will try it soon also.
 
jarda
Forum Guru
Forum Guru
Posts: 7756
Joined: Mon Oct 22, 2012 4:46 pm

Re: Connection tracking counters wrong

Mon Jul 20, 2015 10:49 am

So I tried. I thought it could help with this problem: http://forum.mikrotik.com/viewtopic.php?f=2&t=97121, but it did not helped at all..