..
> IP states added:
>          268221 TCP
>          61708 UDP
>          46932 ICMP
>          25624447 hits
>          38323511 misses
>          0 maximum
>          0 no memory
>          874 bkts in use
>          1424 active
>          108617 expired
>          266820 closed
> State logging enabled

268221+61708+46932
376861
108617+266820
375437
376861-375437
1424

> Why is there a disparity in the number of states I can retrieve with  
> ipfstat and the statistics listed.

Because state table entries can become orphaned from the table.

> Can someone explain what the 9/11 means? I see 0/7 on other packets  
> as well

Observed TCP state of the connection, 9/11 = closing.

Darren

Reply via email to