Hallo,
No "sysctl" settings have been modified.
Output from "vmstat -m" on the primary:
Memory statistics by bucket size
Size In Use Free Requests HighWater Couldfree
16 4631 489 596621 1280 0
32 426 86 826211 640 0
64 2020 92 51787 320 0
128 5104 48 42185 160 32
256 188 36 28544 80 0
512 231 25 21978 40 0
1024 260 24 20677 20 1376
2048 1043 3 1168 10 0
4096 536 1 857 5 0
8192 19 2 28 5 0
16384 3 0 3 5 0
32768 8 0 9 5 0
65536 2 0 2 5 0
131072 2 0 2 5 0
262144 1 0 1 5 0
Memory usage type by bucket size
Size Type(s)
16 devbuf, pcb, routetbl, dirhash, ACPI, exec, UVM amap, UVM aobj,
USB,
USB device, temp
32 devbuf, pcb, routetbl, ifaddr, sysctl, UFS mount, sem, dirhash,
ACPI,
in_multi, exec, UVM amap, USB, temp
64 devbuf, routetbl, ifaddr, vnodes, UFS mount, dirhash, ACPI, proc,
in_multi, ether_multi, VM swap, UVM amap, USB, USB device, NDP, temp
128 devbuf, pcb, routetbl, sysctl, mount, UFS mount, sem, dirhash,
ACPI,
NFS srvsock, ttys, pfkey data, VM swap, UVM amap, USB, USB device,
NDP, temp
256 devbuf, routetbl, ifaddr, ioctlops, vnodes, UFS mount, shm, VM map,
ACPI, exec, UVM amap, USB, USB device
512 devbuf, routetbl, ifaddr, ioctlops, dirhash, ACPI, file desc,
NFS daemon, ttys, newblk, UVM amap, USB, USB device, temp
1024 devbuf, pcb, ioctlops, mount, UFS mount, shm, file desc, proc,
ttys,
exec, UVM amap, crypto data, temp
2048 devbuf, ioctlops, UFS mount, ACPI, file desc, VM swap, UVM amap,
UVM aobj, temp
4096 devbuf, ifaddr, ioctlops, UFS mount, proc, UVM amap, memdesc, temp
8192 devbuf, ttys, pagedep, UVM amap, USB, temp
16384 devbuf, MSDOSFS mount
32768 devbuf, UFS quota, UFS mount, ISOFS mount, inodedep, NTFS hash
65536 devbuf
131072 devbuf, VM swap
262144 VM swap
Memory statistics by type Type Kern
Type InUse MemUse HighUse Limit Requests Limit Limit Size(s)
devbuf 2517 4642K 4643K 78644K 3500 0 0
16,32,64,128,256,512,1024,2048,4096,8192,16384,32768,65536,131072
pcb 37 12K 12K 78644K 105 0 0
16,32,128,1024
routetbl 67 8K 8K 78644K 121 0 0
16,32,64,128,256,512
ifaddr 53 14K 14K 78644K 54 0 0
32,64,256,512,4096
sysctl 2 1K 1K 78644K 2 0 0 32,128
ioctlops 0 0K 4K 78644K 1474 0 0
256,512,1024,2048,4096
mount 14 7K 7K 78644K 14 0 0 128,1024
vnodes 1312 83K 83K 78644K 1316 0 0 64,256
UFS quota 1 32K 32K 78644K 1 0 0 32768
UFS mount 25 67K 67K 78644K 25 0 0
32,64,128,256,1024,2048,4096,32768
shm 2 2K 2K 78644K 2 0 0 256,1024
VM map 2 1K 1K 78644K 2 0 0 256
sem 2 1K 1K 78644K 2 0 0 32,128
dirhash 24 5K 5K 78644K 24 0 0
16,32,64,128,512
ACPI 4789 562K 575K 78644K 17562 0 0
16,32,64,128,256,512,2048
file desc 6 12K 18K 78644K 84 0 0 512,1024,2048
proc 12 10K 10K 78644K 12 0 0 64,1024,4096
NFS srvsock 1 1K 1K 78644K 1 0 0 128
NFS daemon 1 1K 1K 78644K 1 0 0 512
in_multi 24 2K 2K 78644K 24 0 0 32,64
ether_multi 4 1K 1K 78644K 4 0 0 64
ISOFS mount 1 32K 32K 78644K 1 0 0 32768
MSDOSFS mount 1 16K 16K 78644K 1 0 0 16384
ttys 420 308K 308K 78644K 420 0 0
128,512,1024,8192
exec 0 0K 3K 78644K 6716 0 0
16,32,256,1024
pfkey data 1 1K 1K 78644K 2 0 0 128
pagedep 1 8K 8K 78644K 1 0 0 8192
inodedep 1 32K 32K 78644K 1 0 0 32768
newblk 1 1K 1K 78644K 1 0 0 512
VM swap 7 291K 291K 78644K 7 0 0
64,128,2048,131072,262144
UVM amap 4994 208K 274K 78644K 720269 0 0
16,32,64,128,256,512,1024,2048,4096,8192
UVM aobj 2 3K 3K 78644K 2 0 0 16,2048
USB 70 27K 27K 78644K 71 0 0
16,32,64,128,256,512,8192
USB device 21 2K 2K 78644K 21 0 0
16,64,128,256,512
memdesc 1 4K 4K 78644K 1 0 0 4096
crypto data 1 1K 1K 78644K 1 0 0 1024
NDP 7 1K 1K 78644K 8 0 0 64,128
temp 53 13K 18K 78644K 838223 0 0
16,32,64,128,512,1024,2048,4096,8192
NTFS hash 1 32K 32K 78644K 1 0 0 32768
Memory Totals: In Use Free Requests
6427K 94K 1590077
Memory resource pool statistics
Name Size Requests Fail InUse Pgreq Pgrel Npage Hiwat Minpg Maxpg
Idle
extentpl 40 124 0 76 1 0 1 1 0 8
0
phpool 96 1750 0 1184 29 0 29 29 0 8
0
pmappl 152 6764 0 30 2 0 2 2 0 8
0
pvpl 32 2582411 0 13269 131 0 131 131 0 263
9
pdppl 4096 6764 0 30 38 1 37 38 0 8
7
vmsppl 296 6764 0 30 3 0 3 3 0 8
0
vmmpepl 144 1198415 0 6076 262 0 262 262 0 304
36
vmmpekpl 144 19810 0 16 2 0 2 2 0 8
1
aobjpl 64 1 0 1 1 0 1 1 0 8
0
dma16 24 1 0 0 1 0 1 1 0 8
1
dma32 32 8 0 0 1 0 1 1 0 8
1
dma64 64 2 0 0 1 0 1 1 0 8
1
dma256 256 9 0 0 1 0 1 1 0 8
1
dma512 512 196 0 0 1 0 1 1 0 8
1
dma1024 1024 392 0 0 1 0 1 1 0 8
1
dma2048 2048 393 0 0 1 0 1 1 0 8
1
dma4096 4096 1 0 0 1 0 1 1 0 8
1
amappl 72 715015 0 4968 102 0 102 102 0 75
2
anonpl 24 1065255 0 4870 37 0 37 37 0 383
5
bufpl 304 29888 0 1384 107 0 107 107 0 8
0
mbpl 256 4034424 0 23 13 0 13 13 1 384
11
mcl2k 2048 804769 0 16 25 0 25 25 4 3072
16
sockpl 472 7253 0 46 11 0 11 11 0 8
5
procpl 544 6783 0 49 9 0 9 9 0 8
2
processpl 128 6783 0 49 2 0 2 2 0 8
0
zombiepl 144 6734 0 0 1 0 1 1 0 8
1
ucredpl 80 4512 0 20 1 0 1 1 0 8
0
pgrppl 40 187 0 22 1 0 1 1 0 8
0
sessionpl 64 35 0 18 1 0 1 1 0 8
0
pcredpl 24 6783 0 49 1 0 1 1 0 8
0
lockfpl 88 146 0 2 1 0 1 1 0 8
0
filepl 120 35297 0 90 4 0 4 4 0 8
1
fdescpl 440 6765 0 31 5 0 5 5 0 8
1
pipepl 120 10220 0 4 1 0 1 1 0 8
0
kqueuepl 256 1 0 1 1 0 1 1 0 8
0
knotepl 104 2 0 2 1 0 1 1 0 8
0
sigapl 432 6764 0 30 5 0 5 5 0 8
1
wqtasks 40 4502 0 0 1 0 1 1 0 8
1
ifaddritempl 64 11 0 11 1 0 1 1 0 8
0
scxspl 200 2111 0 0 2 0 2 2 0 8
2
namei 1024 47525 0 0 2 0 2 2 0 8
2
vnodes 264 1652 0 1652 111 0 111 111 0 8
0
nchpl 144 2801 0 2763 103 0 103 103 0 8
0
ffsino 232 1639 0 1617 96 0 96 96 0 8
0
dino1pl 128 1639 0 1617 53 0 53 53 0 8
0
dirhash 1024 27 0 27 7 0 7 7 0 128
0
pfrulepl 1328 27 0 16 9 0 9 9 0 8
3
pfstatepl 304 646385 870 10000 1335 565 770 770 0 8
0
pfstatekeypl 104 646385 0 10000 264 0 264 264 0 8
0
pfstateitempl 24 646385 0 10000 61 0 61 61 0 8
0
pfosfpen 112 1400 0 700 32 12 20 20 0 8
0
pfosfp 40 820 0 410 5 0 5 5 0 8
0
rtentpl 200 29 0 29 2 0 2 2 0 8
0
tcpcbpl 560 6370 0 16 8 0 8 8 0 8
5
tcpqepl 32 2 0 0 1 0 1 1 0 8
1
synpl 248 6349 0 0 1 0 1 1 0 8
1
plimitpl 152 36 0 17 1 0 1 1 0 8
0
inpcbpl 352 7161 0 22 6 0 6 6 0 8
4
In use 8293K, total allocated 9516K; utilization 87.1%
Output from "vmstat -m" on the secondary:
Memory statistics by bucket size
Size In Use Free Requests HighWater Couldfree
16 6503 2201 16598947 1280 16543
32 345 4135 62473552 640 19850
64 372 1484 4383236 320 408833
128 2631 89 460597 160 0
256 459 149 998563 80 7448
512 196 68 417409 40 6321
1024 867 69 664931 20 153878
2048 277 11 8127 10 87
4096 22 15 78557 5 77215
8192 13 10 201 5 63
16384 3 0 9 5 0
32768 7 0 16 5 0
65536 3 0 4 5 0
262144 2 0 2 5 0
524288 1 0 1 5 0
Memory usage type by bucket size
Size Type(s)
16 devbuf, pcb, routetbl, dirhash, ACPI, exec, VM swap, UVM amap,
UVM aobj, USB, USB device, temp
32 devbuf, pcb, routetbl, ifaddr, sem, dirhash, ACPI, in_multi, exec,
UVM amap, USB, temp
64 devbuf, routetbl, ifaddr, sysctl, vnodes, UFS mount, dirhash, ACPI,
proc, VFS cluster, in_multi, ether_multi, VM swap, UVM amap, USB,
USB device, NDP, temp
128 devbuf, pcb, routetbl, ifaddr, mount, UFS mount, sem, dirhash,
ACPI,
NFS srvsock, ttys, pfkey data, UVM amap, USB, USB device, NDP, temp
256 devbuf, routetbl, ifaddr, sysctl, ioctlops, vnodes, UFS mount, shm,
VM map, dirhash, ACPI, exec, UVM amap, USB, USB device, temp
512 devbuf, routetbl, ifaddr, ioctlops, dirhash, ACPI, file desc,
NFS daemon, ttys, newblk, UVM amap, USB, temp
1024 devbuf, pcb, sysctl, ioctlops, mount, UFS mount, shm, file desc,
proc,
ttys, exec, UVM amap, crypto data, temp
2048 devbuf, ioctlops, UFS mount, ACPI, file desc, VM swap, UVM amap,
UVM aobj, temp
4096 devbuf, ifaddr, ioctlops, UFS mount, proc, UVM amap, memdesc, temp
8192 devbuf, ttys, pagedep, UVM amap, USB, temp
16384 devbuf, MSDOSFS mount, temp
32768 devbuf, UFS quota, UFS mount, ISOFS mount, inodedep, NTFS hash
65536 devbuf
262144 VM swap
524288 devbuf
Memory statistics by type Type Kern
Type InUse MemUse HighUse Limit Requests Limit Limit Size(s)
devbuf 2537 2044K 2108K 78644K 2894 0 0
16,32,64,128,256,512,1024,2048,4096,8192,16384,32768,65536,524288
pcb 37 12K 13K 78644K 20464 0 0
16,32,128,1024
routetbl 71 8K 12K 78644K 510 0 0
16,32,64,128,256,512
ifaddr 55 14K 14K 78644K 56 0 0
32,64,128,256,512,4096
sysctl 3 2K 2K 78644K 3 0 0 64,256,1024
ioctlops 0 0K 4K 78644K 14631 0 0
256,512,1024,2048,4096
mount 14 7K 7K 78644K 14 0 0 128,1024
vnodes 47 4K 94K 78644K 105044 0 0 64,256
UFS quota 1 32K 32K 78644K 1 0 0 32768
UFS mount 25 72K 72K 78644K 25 0 0
64,128,256,1024,2048,4096,32768
shm 2 2K 2K 78644K 2 0 0 256,1024
VM map 2 1K 1K 78644K 2 0 0 256
sem 2 1K 1K 78644K 2 0 0 32,128
dirhash 75 15K 28K 78644K 4632 0 0
16,32,64,128,256,512
ACPI 1784 216K 233K 78644K 4627 0 0
16,32,64,128,256,512,2048
file desc 7 13K 33K 78644K 9053 0 0 512,1024,2048
proc 14 10K 10K 78644K 14 0 0 64,1024,4096
VFS cluster 0 0K 1K 78644K 41542 0 0 64
NFS srvsock 1 1K 1K 78644K 1 0 0 128
NFS daemon 1 1K 1K 78644K 1 0 0 512
in_multi 24 2K 2K 78644K 24 0 0 32,64
ether_multi 4 1K 1K 78644K 4 0 0 64
ISOFS mount 1 32K 32K 78644K 1 0 0 32768
MSDOSFS mount 1 16K 16K 78644K 1 0 0 16384
ttys 414 282K 282K 78644K 414 0 0
128,512,1024,8192
exec 0 0K 3K 78644K 190414 0 0
16,32,256,1024
pfkey data 1 1K 1K 78644K 2 0 0 128
pagedep 1 8K 8K 78644K 1 0 0 8192
inodedep 1 32K 32K 78644K 1 0 0 32768
newblk 1 1K 1K 78644K 1 0 0 512
VM swap 7 299K 299K 78644K 7 0 0
16,64,2048,262144
UVM amap 6456 306K 568K 78644K 19858649 0 0
16,32,64,128,256,512,1024,2048,4096,8192
UVM aobj 2 3K 3K 78644K 2 0 0 16,2048
USB 42 15K 15K 78644K 42 0 0
16,32,64,128,256,512,8192
USB device 10 1K 1K 78644K 10 0 0 16,64,128,256
memdesc 1 4K 4K 78644K 1 0 0 4096
crypto data 1 1K 1K 78644K 1 0 0 1024
NDP 7 1K 1K 78644K 8 0 0 64,128
temp 52 9K 24K 78644K 65831054 0 0
16,32,64,128,256,512,1024,2048,4096,8192,16384
NTFS hash 1 32K 32K 78644K 1 0 0 32768
Memory Totals: In Use Free Requests
3483K 570K 86084156
Memory resource pool statistics
Name Size Requests Fail InUse Pgreq Pgrel Npage Hiwat Minpg Maxpg
Idle
extentpl 40 94 0 56 1 0 1 1 0 8
0
phpool 96 243532 0 2518 92 0 92 92 0 8
3
pmappl 152 178805 0 30 3 0 3 3 0 8
1
pvpl 32 67967806 0 15167 244 0 244 244 0 263
118
pdppl 4096 178805 0 30 4609 4572 37 66 0 8
7
vmsppl 296 178805 0 30 6 0 6 6 0 8
3
vmmpepl 144 30609701 0 7700 987 509 478 478 0 304
162
vmmpekpl 144 1117159 0 16 2 0 2 2 0 8
1
aobjpl 72 1 0 1 1 0 1 1 0 8
0
amappl 72 19664603 0 6432 4769 4576 193 209 0 75
71
anonpl 24 24012581 0 6612 97 0 97 97 0 191
49
bufpl 304 8511069 0 13100 4490 3481 1009 1009 0 8
0
mbpl 256 193150879 0 227 189 0 189 189 1 384
172
mcl2k 2048 46581952 0 44 92 0 92 92 4 3072
69
mcl9k 9216 17 0 17 25 0 25 25 8 6144
8
sockpl 424 1833924 0 204 21932 21897 35 319 0 8
8
procpl 496 178819 0 44 10 0 10 10 0 8
4
processpl 120 178819 0 44 3 0 3 3 0 8
1
zombiepl 144 178775 0 0 1 0 1 1 0 8
1
ucredpl 80 19886 0 15 1 0 1 1 0 8
0
pgrppl 40 31044 0 22 1 0 1 1 0 8
0
sessionpl 64 16652 0 18 1 0 1 1 0 8
0
pcredpl 24 178819 0 44 1 0 1 1 0 8
0
lockfpl 88 68096 0 2 1 0 1 1 0 8
0
filepl 120 11982350 0 97 7 0 7 7 0 8
3
fdescpl 440 178806 0 31 8 0 8 8 0 8
4
pipepl 120 176706 0 4 1 0 1 1 0 8
0
kqueuepl 256 29 0 1 1 0 1 1 0 8
0
knotepl 104 58 0 2 1 0 1 1 0 8
0
sigapl 488 178805 0 30 9 0 9 9 0 8
4
wqtasks 40 798966 0 0 1 0 1 1 0 8
1
ifaddritempl 64 11 0 11 1 0 1 1 0 8
0
scxspl 200 12715112 0 0 1 0 1 1 0 8
1
wdcspl 176 12 0 0 1 0 1 1 0 8
1
namei 1024 14862859 0 0 2 0 2 2 0 8
2
vnodes 264 13107 0 13107 874 0 874 874 0 8
0
nchpl 144 4438184 0 4079 220 38 182 220 0 8
8
ffsino 232 3376215 0 13096 772 1 771 771 0 8
0
dino1pl 128 3376215 0 13096 423 0 423 423 0 8
0
dirhash 1024 6921 0 136 65 0 65 65 0 128
31
pfrulepl 1272 296 0 16 11 1 10 10 0 8
4
pfstatepl 296 33067612 0 280 162659 162626 33 431 0 8
8
pfstatekeypl 104 33067612 0 280 12990 12977 13 148 0 8
3
pfstateitempl 24 33067612 0 280 564 553 11 34 0 8
8
pfrktable 1296 50 0 0 3 0 3 3 0 8
3
pfrke_plain 160 150 0 0 1 0 1 1 0 8
1
pfosfpen 112 12600 0 700 224 204 20 20 0 8
0
pfosfp 40 7380 0 410 5 0 5 5 0 8
0
rtentpl 200 43 0 31 2 0 2 2 0 8
0
rttmrpl 64 12 0 0 1 0 1 1 0 8
1
tcpcbpl 560 1800338 0 174 32023 31985 38 404 0 8
8
tcpqepl 32 1761166 0 0 1 0 1 1 0 8
1
sackhlpl 24 170 0 0 1 0 1 1 0 8
1
synpl 248 4606 0 0 1 0 1 1 0 8
1
plimitpl 152 15534 0 12 2 0 2 2 0 8
1
inpcbpl 352 1813473 0 180 16480 16452 28 258 0 8
8
In use 15966K, total allocated 20340K; utilization 78.5%
Mit freundlichen GrC<C en
SC)bastien Maerker
--
SC)bastien Maerker
Continum AG
Bismarckallee 7b-d
79098 Freiburg i. Br.
Tel. +49 761 217 111-77
Fax. +49 761 217 111-99
http://www.continum.net
Sitz der Gesellschaft: Freiburg im Breisgau
Registergericht: Amtsgericht Freiburg, HRB 6866
Vorstand: Rolf Mathis, Volker T. Mueller
Vorsitzender d. Aufsichtsrats: Prof. Dr. Karl-F. Fischbach
----- UrsprC<ngliche Mail -----
Von: "Stuart Henderson" <[email protected]>
An: "Sebastien Maerker, Continum" <[email protected]>
CC: "Steven Chamberlain" <[email protected]>, [email protected]
Gesendet: Mittwoch, 7. Dezember 2011 10:38:44
Betreff: Re: Problems with OpenBSD 5.0 and PF
(quoting the whole email with attachments below for readers on the mailing
list; attachments get stripped)
> memory 19339 0.3/s
In that case, vmstat -m might be useful too.
Have any sysctl settings been changed?
On 2011/12/07 10:11, Sebastien Maerker, Continum wrote:
> Hello,
>
> Thank you very much for your answers.
>
> As attachment the Output from the commands "pfctl -vsr" and "pfctl -si" from
the primary
> and secondary server.
>
> Thank you in advance
> SC)bastien Maerker
>
> --
> SC)bastien Maerker
> Continum AG
> Bismarckallee 7b-d
> 79098 Freiburg i. Br.
> Tel. +49 761 217 111-77
> Fax. +49 761 217 111-99
> http://www.continum.net
>
> Sitz der Gesellschaft: Freiburg im Breisgau
> Registergericht: Amtsgericht Freiburg, HRB 6866
> Vorstand: Rolf Mathis, Volker T. Mueller
> Vorsitzender d. Aufsichtsrats: Prof. Dr. Karl-F. Fischbach
>
>
>
>
> ----- UrsprC<ngliche Mail -----
> Von: "Steven Chamberlain" <[email protected]>
> An: "Sebastien Maerker, Continum" <[email protected]>
> CC: "Stuart Henderson" <[email protected]>, [email protected]
> Gesendet: Dienstag, 6. Dezember 2011 17:05:38
> Betreff: Re: Problems with OpenBSD 5.0 and PF
>
> On 06/12/11 15:45, Sebastien Maerker, Continum wrote:
> > We have already tested the "block log all" and "tcpdump -nnei pflog0"
with
> > activated PF on the primary, but we saw nothing/nothing was logged.
>
> Hi,
>
> Do you really mean that *nothing* was being logged at all? With 'block
> log all' at the start of your ruleset, I'd expect pretty much
> *everything* to be logged (because the 'log' flag also applies to
> packets that are later matched by a pass rule).
>
> Otherwise maybe you need to flush the state table with 'pfctl -F states'
> after starting tcpdump, before you see any new traffic logged. But be
> careful -- if you're controlling the server via ssh I imagine it would
> close the connection, so you'd better check first that your firewall
> ruleset accepts new connections to the ssh port.
>
> Perhaps share with us the output of 'pfctl -vsr' to show the active
> ruleset and the 'pfctl -si' counters, after enabling PF on the machine.
>
> Regards,
> --
> Steven Chamberlain
> [email protected]
> block return log all
> [ Evaluations: 22976373 Packets: 1612 Bytes: 163183 States: 0
]
> [ Inserted: uid 0 pid 23494 State Creations: 0 ]
> pass in on em0 inet proto tcp from LOCAL to PRIMARY port = ssh flags S/SA
> [ Evaluations: 22976373 Packets: 0 Bytes: 0 States: 0
]
> [ Inserted: uid 0 pid 23494 State Creations: 0 ]
> pass in on em0 inet proto tcp from LOCAL to PRIMARY port = ssh flags S/SA
> [ Evaluations: 162859 Packets: 11545 Bytes: 1366076 States: 3
]
> [ Inserted: uid 0 pid 23494 State Creations: 3 ]
> pass in on em0 inet proto tcp from LOCAL to PRIMARY port = ssh flags S/SA
> [ Evaluations: 162859 Packets: 0 Bytes: 0 States: 0
]
> [ Inserted: uid 0 pid 23494 State Creations: 0 ]
> pass in on em0 inet proto tcp from LOCAL to PRIMARY port = ssh flags S/SA
> [ Evaluations: 162859 Packets: 0 Bytes: 0 States: 0
]
> [ Inserted: uid 0 pid 23494 State Creations: 0 ]
> pass in on em0 inet proto tcp from any to PRIMARY port = domain flags S/SA
> [ Evaluations: 162859 Packets: 1952486 Bytes: 156996419 States: 39
]
> [ Inserted: uid 0 pid 23494 State Creations: 149175]
> pass out on em0 inet proto tcp from PRIMARY to LOCAL port = smtp flags S/SA
> [ Evaluations: 165390 Packets: 0 Bytes: 0 States: 0
]
> [ Inserted: uid 0 pid 23494 State Creations: 0 ]
> pass out on em0 inet proto tcp from PRIMARY to LOCAL port = smtp flags S/SA
> [ Evaluations: 5 Packets: 0 Bytes: 0 States: 0
]
> [ Inserted: uid 0 pid 23494 State Creations: 0 ]
> pass out on em0 inet proto tcp from PRIMARY to any port = ssh flags S/SA
> [ Evaluations: 5 Packets: 0 Bytes: 0 States: 0
]
> [ Inserted: uid 0 pid 23494 State Creations: 0 ]
> pass out on em0 inet proto tcp from PRIMARY to any port = domain flags S/SA
> [ Evaluations: 5 Packets: 0 Bytes: 0 States: 0
]
> [ Inserted: uid 0 pid 23494 State Creations: 0 ]
> pass out on em0 inet proto tcp from PRIMARY to OPENBSDMIRROR port = www
flags S/SA
> [ Evaluations: 5 Packets: 0 Bytes: 0 States: 0
]
> [ Inserted: uid 0 pid 23494 State Creations: 0 ]
> pass out on em0 inet proto udp from PRIMARY to any port = domain
> [ Evaluations: 22813514 Packets: 1758 Bytes: 108460 States: 0
]
> [ Inserted: uid 0 pid 23494 State Creations: 877 ]
> pass out on em0 inet proto udp from PRIMARY to TIMESERVER port = ntp
> [ Evaluations: 2525 Packets: 4956 Bytes: 376656 States: 1
]
> [ Inserted: uid 0 pid 23494 State Creations: 1166 ]
> pass out on em0 inet proto icmp all icmp-type echoreq code 0
> [ Evaluations: 2531 Packets: 133450 Bytes: 11209800 States: 1
]
> [ Inserted: uid 0 pid 23494 State Creations: 1 ]
> pass in on em0 inet proto udp from any to PRIMARY port = domain
> [ Evaluations: 22976373 Packets: 53894775 Bytes: 6413293719 States:
8861 ]
> [ Inserted: uid 0 pid 23494 State Creations: 22803973]
> pass in on em0 inet proto icmp all icmp-type echoreq code 0
> [ Evaluations: 22973842 Packets: 466 Bytes: 39012 States: 0
]
> [ Inserted: uid 0 pid 23494 State Creations: 227 ]
> Status: Enabled for 0 days 18:50:28 Debug: err
>
> Interface Stats for em0 IPv4 IPv6
> Bytes In 12503041499 0
> Bytes Out 28691622514 64
> Packets In
> Passed 175648715 0
> Blocked 128572 0
> Packets Out
> Passed 174795842 1
> Blocked 1966 0
>
> State Table Total Rate
> current entries 9142
> searches 56005712 825.7/s
> inserts 22949290 338.3/s
> removals 22940152 338.2/s
> Counters
> match 22970249 338.7/s
> bad-offset 0 0.0/s
> fragment 0 0.0/s
> short 11022 0.2/s
> normalize 0 0.0/s
> memory 19339 0.3/s
> bad-timestamp 0 0.0/s
> congestion 0 0.0/s
> ip-option 0 0.0/s
> proto-cksum 0 0.0/s
> state-mismatch 0 0.0/s
> state-insert 0 0.0/s
> state-limit 0 0.0/s
> src-limit 0 0.0/s
> synproxy 0 0.0/s
> block return log all
> [ Evaluations: 150044 Packets: 240 Bytes: 13567 States: 0
]
> [ Inserted: uid 0 pid 23716 State Creations: 0 ]
> pass in on bge0 inet proto tcp from LOCAL to SECONDARY port = ssh flags S/SA
keep state
> [ Evaluations: 150044 Packets: 0 Bytes: 0 States: 0
]
> [ Inserted: uid 0 pid 23716 State Creations: 0 ]
> pass in on bge0 inet proto tcp from LOCAL to SECONDARY port = ssh flags S/SA
keep state
> [ Evaluations: 236 Packets: 4332 Bytes: 459888 States: 2
]
> [ Inserted: uid 0 pid 23716 State Creations: 2 ]
> pass in on bge0 inet proto tcp from LOCAL to SECONDARY port = ssh flags S/SA
keep state
> [ Evaluations: 236 Packets: 0 Bytes: 0 States: 0
]
> [ Inserted: uid 0 pid 23716 State Creations: 0 ]
> pass in on bge0 inet proto tcp from LOCAL to SECONDARY port = ssh flags S/SA
keep state
> [ Evaluations: 236 Packets: 0 Bytes: 0 States: 0
]
> [ Inserted: uid 0 pid 23716 State Creations: 0 ]
> pass in on bge0 inet proto tcp from any to SECONDARY port = domain flags
S/SA keep state
> [ Evaluations: 236 Packets: 0 Bytes: 0 States: 0
]
> [ Inserted: uid 0 pid 23716 State Creations: 0 ]
> pass out on bge0 inet proto tcp from SECONDARY to LOCAL port = smtp flags
S/SA keep state
> [ Evaluations: 149470 Packets: 0 Bytes: 0 States: 0
]
> [ Inserted: uid 0 pid 23716 State Creations: 0 ]
> pass out on bge0 inet proto tcp from SECONDARY to LOCAL port = smtp flags
S/SA keep state
> [ Evaluations: 149017 Packets: 0 Bytes: 0 States: 0
]
> [ Inserted: uid 0 pid 23716 State Creations: 0 ]
> pass out on bge0 inet proto tcp from SECONDARY to any port = ssh flags S/SA
keep state
> [ Evaluations: 149017 Packets: 0 Bytes: 0 States: 0
]
> [ Inserted: uid 0 pid 23716 State Creations: 0 ]
> pass out on bge0 inet proto tcp from SECONDARY to any port = domain flags
S/SA keep state
> [ Evaluations: 149017 Packets: 1962846 Bytes: 157462919 States: 63
]
> [ Inserted: uid 0 pid 23716 State Creations: 149015]
> pass out on bge0 inet proto tcp from SECONDARY to OPENBSDMIRROR port = www
flags S/SA keep state
> [ Evaluations: 149017 Packets: 0 Bytes: 0 States: 0
]
> [ Inserted: uid 0 pid 23716 State Creations: 0 ]
> pass out on bge0 inet proto udp from SECONDARY to any port = domain keep
state
> [ Evaluations: 149808 Packets: 320 Bytes: 26296 States: 0
]
> [ Inserted: uid 0 pid 23716 State Creations: 160 ]
> pass out on bge0 inet proto udp from SECONDARY to TIMESERVER port = ntp keep
state
> [ Evaluations: 217 Packets: 111 Bytes: 8436 States: 0
]
> [ Inserted: uid 0 pid 23716 State Creations: 57 ]
> pass out on bge0 inet proto icmp all icmp-type echoreq code 0 keep state
> [ Evaluations: 149234 Packets: 0 Bytes: 0 States: 0
]
> [ Inserted: uid 0 pid 23716 State Creations: 0 ]
> pass in on bge0 inet proto udp from any to SECONDARY port = domain keep
state
> [ Evaluations: 150044 Packets: 1132 Bytes: 69162 States: 0
]
> [ Inserted: uid 0 pid 23716 State Creations: 564 ]
> pass in on bge0 inet proto icmp all icmp-type echoreq code 0 keep state
> [ Evaluations: 810 Packets: 135186 Bytes: 11355400 States: 1
]
> [ Inserted: uid 0 pid 23716 State Creations: 6 ]
> Status: Enabled for 0 days 19:00:08 Debug: err
>
> Interface Stats for bge0 IPv4 IPv6
> Bytes In 3534472098 0
> Bytes Out 5672369615 64
> Packets In
> Passed 45292784 0
> Blocked 6675 0
> Packets Out
> Passed 46795234 1
> Blocked 216 0
>
> State Table Total Rate
> current entries 60
> searches 2104339 30.8/s
> inserts 149810 2.2/s
> removals 149752 2.2/s
> Counters
> match 150053 2.2/s
> bad-offset 0 0.0/s
> fragment 0 0.0/s
> short 4 0.0/s
> normalize 0 0.0/s
> memory 0 0.0/s
> bad-timestamp 0 0.0/s
> congestion 0 0.0/s
> ip-option 0 0.0/s
> proto-cksum 0 0.0/s
> state-mismatch 2 0.0/s
> state-insert 0 0.0/s
> state-limit 0 0.0/s
> src-limit 0 0.0/s
> synproxy 0 0.0/s
