sk21834 gives a good explanation of fwx_cache table - basically this table will cache NAT related enries for a connection from a specific source to a specific destination so that all future NATTED connections from this source with the same destination donot have to go through the NAT rulebase, thus improving performance.
fwx_alloc table caches information pertaining to allocation of ports for the translated conns. HTH, Rajeev On 9/9/05, Kevin Chu <[EMAIL PROTECTED]> wrote: > > Hi > > do you know what's the difference of the following 2 tables > fwx_cache/fwx_alloc on Checkpoint NG AI R55 > > # fw tab -s > HOST NAME ID #VALS #PEAK #SLINKS > localhost tab_name_table 8114 302 303 0 > localhost sip_registration 8115 0 0 0 > localhost fwx_cache 8116 9946 10000 0 > localhost redirected_conns 8117 0 0 0 > localhost h323_gk_pending_table 8118 0 0 0 > localhost cphwd_vpndb 8123 0 0 0 > localhost host_ip_addrs_all 8125 32 32 0 > localhost excessive_table 8126 207 4643 0 > localhost scv_held_packets_table 8127 0 0 0 > localhost conn_uuids 8129 9 30 0 > localhost chain_log_unification_table 8130 0 0 0 > localhost fwx_pending 8131 0 6 0 > localhost scv_ps_table 8133 0 0 0 > localhost scv_gw_table 8134 0 0 0 > localhost string_dictionary_table 8135 468 468 0 > localhost sam_log 8137 0 0 0 > localhost sam_requests 8140 0 0 0 > localhost sam_blocked_ips 8141 0 0 0 > localhost saved_kbuf_table 8147 0 0 0 > localhost fwx_ip_lookup_tab 8152 0 0 0 > localhost conn_nsons 8156 9 98 0 > localhost conn_relations 8157 9 30 0 > localhost connections 8158 5585 8216 19442 > localhost fwx_cntl_dyn_tab 8161 0 0 0 > localhost h323_tracer_table 8172 0 1 0 > localhost synatk_table 8173 1 1 0 > localhost fwx_auth 8174 0 0 0 > localhost host_ip_addrs 8177 16 16 0 > localhost hold_table 8183 0 17 0 > localhost frag_table 8184 0 2 0 > localhost arp_table 8186 0 0 0 > localhost fwx_alloc 8187 3002 6493 0 > > Br > Kevin > > > > > ================================================= > To set vacation, Out-Of-Office, or away messages, > send an email to [EMAIL PROTECTED] > in the BODY of the email add: > set fw-1-mailinglist nomail > ================================================= > To unsubscribe from this mailing list, > please see the instructions at > http://www.checkpoint.com/services/mailing.html > ================================================= > If you have any questions on how to change your > subscription options, email > [EMAIL PROTECTED] > ================================================= > -- Rajeev Gupta CISSP, CCMSE+VSX ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
