You are right, it is not ticking

# ipfstat | grep Tick
IPF Ticks:      0

They are using Solaris 11/06 with the IPF patch that fixed the IPMP problem.
Could this be a build or configuration issue?   I did not see complains
by others on this.

what do you say?



[EMAIL PROTECTED] wrote:
Prameet Chhabra wrote:

All,

Any help will be greatly appreciated

The issue is, that device needs to handle large number of tcp connections, to do this, set IPF tcp state timeout value to small number to avoid
keeping many dead states for long time. we can set ipf tcp
state timeout values by editing /etc/system or using command ipf -T. Verified the new values by ipf -T list and ipfstat -t (ttl).
However, I found that even with small timeout value, IPF keeps some
half-closed TCP states for very long time.  Is this a bug of IPF or I
did not set ipf tcp timeout correctly?  Solaris 10 11/06 release.


Can you please confirm that the timeout function is ticking over by
doing:

# ipfstat | grep Ticks

a couple of times.

Darren

_______________________________________________
networking-discuss mailing list
[email protected]

Reply via email to