The changelogs of the last firmware releases have some references to "conntrack".

Maybe anyone has check it?

https://mikrotik.com/download/changelogs

We had the same problem on our BGP 1072, just turn off connection tracking and you wont experience any more reboots, its due to hardware limitations not one mikrotik router can smoothly handle 2.5Gbps of bidirectional traffic at once, the connection tracking causes a spike in the CPU performance th...

Thanks rextended

Hello, I'm trying to track a connection with the following command: /ip firewall connection print from=[find dst-address="SERVER_IP:80"] This is the destination address and destination port 80, but I know the source address but not the port. Is it possible to allow any port?, something lik...

My two cents:

Mikrotik packet sniffer tcpdump / wireshark / tshark -> https://elundivided.wordpress.com/2021/ ... rk-tshark/

For me, the solution was disable: IP > Cloud > Update Time and enable: System > SNTP Client Since then, I pass from 1 or 2 watchdog reboots a day to +6 days an counting. I also tried before disable conntrack for some IPs and lower time for TCP Established Timeout from 1 day to 30min. But any of them...

RouterOS does not use any TILE code from the Linux kernel. This news has no effect on RouterOS. Please could you explain how is this possible? It's hard to undertand your comment, Linux kernel works around system architecture, x86, arm, riscv, https://github.com/torvalds/linux/tree/master/arch . If...

+1 sflow, almost in 10G cable routers

I only want to get the mapping with one-to-one port, not with shifted ports, the very basic NAT over a range of ports from a public IP to a private IP with UDP.

In an other test, I also set to-ports with the same range than dst-port have, but the result is the same, it doesn't work.

Hello, I'm trying to combine multiple one-port dst-nat rules into an other one with the range of those ports. These are the rules and the netcat who test them: add action=dst-nat chain=dstnat dst-address=PUB_IP dst-port=10000 protocol=udp to-addresses=PRIV_IP add action=dst-nat chain=dstnat dst-addr...

I have two CCR1072 with a configuration like this one: MK1 MK2 bonding-+ +--bonding | | + vlan1----------+----------vlan1 + | | | | vrrp1 + | | (prio 200) (prio 150) | | | + vlan2----------+----------vlan2 + | vrrp2 + (prio 200) (prio 150) MK1 is the master on vrrp's and, inside each vrrp, these are...

Hello, I can't print any route or execute any command related with route, like cache or add, the result is: > ip route cache print action timed out - try again, if error continues contact MikroTik support and send a supout file (13) I have MikroTik RouterOS 6.46.2 in a CCR1072-1G-8S+ Any suggestion...

After hours in this state, generating the support file [1] and download it fixed the issue. Maybe it flush something that reset the problem...

[1] - https://wiki.mikrotik.com/wiki/Manual:S ... utput_File

Hello, I can't print any route or execute any command related with route, like cache or add, the result is: > ip route cache print action timed out - try again, if error continues contact MikroTik support and send a supout file (13) I have MikroTik RouterOS 6.46.2 in a CCR1072-1G-8S+ Any suggestions...

Hello, I have one CCR1072-1G-8S+ which 4 SFP+ ports and 1 Ethernet being used. Under Resources > IRQ, there aren't any line with any reference to the SFP ports, the only irq counter that increase their number is the "eth" and "ether1" which are listed to Active CPU 4 and 0 respec...