Re: PF concurrent connection

2011-12-12 Thread Hassan Monfared
yes, maybe grepping Public_IP solve the problem On Mon, Dec 12, 2011 at 3:17 PM, Kapetanakis Giannis < bil...@edu.physics.uoc.gr> wrote: > On 12/12/11 13:28, Hassan Monfared wrote: > >> pfctl -ss | grep ESTABLISHED | wc -l >> >> > This might count them double if you are a router cause each conne

Re: PF concurrent connection

2011-12-12 Thread Kapetanakis Giannis
On 12/12/11 13:28, Hassan Monfared wrote: pfctl -ss | grep ESTABLISHED | wc -l This might count them double if you are a router cause each connection will be bound to both interfaces. Giannis

Re: PF concurrent connection

2011-12-12 Thread Hassan Monfared
pfctl -ss | grep ESTABLISHED | wc -l On Mon, Dec 12, 2011 at 1:07 PM, co...@tetrachina.com wrote: > Hi, > OpenBSD PF as firewall , and i generated almost 150,000 states ( > use the commandline check: pfctl -ss|wc -l), > > do the states mean concurrent connection ? if not , how to get th

Re: PF concurrent connection

2011-12-12 Thread Vadim Agarkov
Hi, You can read about states at http://en.wikipedia.org/wiki/Stateful_firewall for example. And concurrent connections for ipv4 can be viewed using netstat command: netstat -anfinet and ipv6: netstat -anfinet6 You can check for currently established connections with the command like thi

PF concurrent connection

2011-12-12 Thread co...@tetrachina.com
Hi, OpenBSD PF as firewall , and i generated almost 150,000 states ( use the commandline check: pfctl -ss|wc -l), do the states mean concurrent connection ? if not , how to get the concurrent connection? thanks for your reply.Merry Christmas,Guys! Best Regards