Too many tracked connections p0f warnings messages

Archmactrix

Well-Known Member
Jan 20, 2012
138
2
68
cPanel Access Level
Root Administrator
I see these repeated Passive OS fingerprinting (p0f) daemon "Too many tracked connections" warnings in the messages log once in a while, like today when the where logged 298 times in the message log for about 11 minutes.

Code:
Apr 13 13:05:14 xxxxxx p0f: [!] WARNING: Too many tracked connections, deleting 101. Use -m to adjust.
[...]
Apr 13 13:16:54 xxxxxx p0f: [!] WARNING: Too many tracked connections, deleting 101. Use -m to adjust.
I can find any information about these warnings, so I would like to know if this is something that needs to be looked into?
 

cPanelMichael

Administrator
Staff member
Apr 11, 2011
47,908
2,218
463
Hello :)

This will happen automatically if there are too many tracked connections by the Passive OS Fingerprinting daemon. It automatically prunes the oldest connections when that warning message appears, and is by design for efficiency.

Thank you.