dropping packets; increase ip_conntrack_max