Hi there,

running FreeBSD 6.1 stable with:

ipf: IP Filter: v4.1.13 (416)
Kernel: IP Filter: v4.1.13
Running: yes
Log Flags: 0x20000000 = block
Default: block all, Logging: available
Active list: 1
Feature mask: 0xa


The state table was maxing out

IP states added:
        503251 TCP
        103500 UDP
        63074 ICMP
        59277927 hits
        31067012 misses
        49128 maximum
        0 no memory
        44 bkts in use
        9040 active
        166568 expired
        494217 closed

Our limits are:

net.inet.ipf.fr_statemax: 9041
net.inet.ipf.fr_statesize: 15370



If we run ipfstat -FS it only clears a few states.. If I run ipfstat - sl we only see a fraction of the states.


On previous versions ipfstat -FS always knocked the state table to zero then it started building again.

any suggestions?

Thanks,

--Wes

Reply via email to