I am convinced that there is some sort of "leak" in the state table statistics.

My stats are:

IP states added:
        415669 TCP
        84356 UDP
        59728 ICMP
        33978265 hits
        44129766 misses
        0 maximum
        0 no memory
        608 bkts in use
        3214 active
        144060 expired
        412479 closed


when I count them up using ipfstat -R -sl I only get about 600 or so which makes sense. Also, running ipf -FS -Fs DOES NOT clear the 3214 number but rather sets the active back 600 or so (which is the bkts in use number).

my question is: Does the active statistic represent the number of statistics that I can retrieve from ipfstat -R -sl or not.

I have been through the docs the man pages and the posts. I can't seem to find these answers. If no one knows this then it looks like I will be going through the code to see for myself this weekend :(

Thanks,

--Wes

Reply via email to