Peter Eisch wrote:
On 5/25/06 10:23 AM, "Jeff A. Earickson" <[EMAIL PROTECTED]> wrote:
All,
Stoopid question, but I couldn't find anything in Phil's FAQ,
the archives, or googling.
* How can I tell if my state table is full or near-full or in trouble?
------ Forwarded Message
From: Darren Reed <[EMAIL PROTECTED]>
Date: Mon, 27 Mar 2006 21:47:14 +0000
To: Peter Eisch <[EMAIL PROTECTED]>
Cc: [EMAIL PROTECTED]
Subject: Re: IPFilter practical limits?
Should there have been a message somewhere that the insert into the state
table failed or there was no more memory available?
When the limits are reached, you'll see a non-zero number next to the
line with "maximum" in it from running "ipfstat -s".
------ End of Forwarded Message
So you are saying that any value that is non-zero next to maximum shows
a state table that has reached its limits ?
I have three different numbers on three different yet identical servers
and am trying to figure out what the maximum value would actually be.
So which one is right ?
Server 1
bash-2.03# ipfstat -s
IP states added:
646374 TCP
3719 UDP
3 ICMP
96767577 hits
1503033 misses
843934 maximum
0 no memory
95 bkts in use
638666 active
3720 expired
7710 closed
Server 2
IP states added:
9115 TCP
5516 UDP
0 ICMP
2080425 hits
1101742 misses
1068578 maximum
0 no memory
8 bkts in use
4013 active
5513 expired
5105 closed
Server 3
IP states added:
59704 TCP
22634 UDP
0 ICMP
3271981 hits
781759 misses
662908 maximum
0 no memory
49 bkts in use
52133 active
22626 expired
7579 closed
