Thanks Steve..
I'm not measuring performace at all, but I'm loosing connections
sometimes.. occurs with some WAN clients running 64kbps links and even
at LAN. My clients must connect to a partner mainframe via tn3270 (just
telnet, 23, no trouble), but sometimes clients have to try 10-20 times
to get a connection, some on the first try do, thats confusing.. and
they mantain conections opened (nobody wants to loose it). Well, look at
some of my outputs:
[EMAIL PROTECTED] conf]# ipfstat
IPv6 packets: in 2 out 164
input packets: blocked 54250 passed 9545845 nomatch 2 counted
0 short 0
output packets: blocked 164 passed 9421015 nomatch 119 counted 0
short 0
input packets logged: blocked 54163 passed 0
output packets logged: blocked 0 passed 0
packets logged: input 0 output 0
log failures: input 0 output 0
fragment state(in): kept 0 lost 0
fragment state(out): kept 0 lost 0
packet state(in): kept 357749 lost 74005
packet state(out): kept 509 lost 74191
ICMP replies: 5998 TCP RSTs sent: 12
Invalid source(in): 0
Result cache hits(in): 36366 (out): 675
IN Pullups succeeded: 0 failed: 0
OUT Pullups succeeded: 0 failed: 0
Fastroute successes: 6010 failures: 0
TCP cksum fails(in): 0 (out): 0
Packet log flags set: (0)
none
[EMAIL PROTECTED] conf]# ipfstat -s
IP states added:
279963 TCP
59744 UDP
18640 ICMP
35818281 hits
977064 misses
0 maximum
0 no memory
484 bkts in use
503 active
78325 expired
279519 closed
This machine is a FreeBSD 4.7-RELEASE-p4 under a Pentium 200Mhz, 128MB
RAM and IPFILTER 3.4.29
I don't know a place to begin. What is high and what is low.. I know
(and I want to learn more) that these topics is for people that
understands better about TCP/IP and firewalling, but people wants
something more like 'basics', and then jump to something more
sofisticated.. That's why I asked for a section on howto or faq talking
about this, covering o.s. too, I'm sure that lots of people will enjoy it..
Thanks for your support.
--
%------------------------%
| Alexandre Vasconcelos |
| Unix Admin |
| SSPJ/GO |
%------------------------%
| FreeBSD, Unix and Free |
%------------------------%
