Hi,
I've recently upgraded to IPF 4.1.3 on NetBSD 2.0.2 and have noticed
something odd about the output
in the ipfstat -s command. It seems that the number of states "active"
on our system is growing, but the number "closed" or "expired" isn't
moving beyond 0. This didn't seem to be the case on the older 3.x
version from NetBSD 1.6.
Doesn't really make sense because the number of state table buckets
grows and increases significantly, and I would have thought this would
be reflecting the increasing (and decreasing - by way of expiry or
closure) IP states.
Below is a snapshot of what I'm talking about.
$ ipfstat -s
IP states added:
621901 TCP
5137 UDP
6 ICMP
30018138 hits
1339350 misses
0 maximum
0 no memory
0 max bucket
0 maximum
0 no memory
972 bkts in use
6688 active
0 expired
0 closed
State logging enabled
State table bucket statistics:
972 in use
4.64% bucket usage
0 minimal length
3 maximal length
1.042 average length
Cheers,
Corey.
