Does anyone have any idea about ebtables rule count limitations? It starts giving this error around 26000 rules for filter table :
[root@localhost 09]# ebtables -A testchain1 -p IPv4 --ip-src 'ipv4.x.x.x' -s 'mac:x:x:x:x:x' -j ACCEPT
Unable to update the kernel. Two possible causes:
- Multiple ebtables programs were executing simultaneously. The ebtables userspace tool doesn't by default support multiple ebtables programs running concurrently. The ebtables option --concurrent or a tool like flock can be used to support concurrent scripts that update the ebtables kernel tables.
- The kernel doesn't support a certain ebtables extension, consider recompiling your kernel or insmod the extension. . [root@localhost 09]#
There is free RAM while SWAP is fully used.