Date: Thu, 30 Aug 2001 19:07:07 +0200 From: Mathieu Arnold <arn_mat@club-internet.fr> To: freebsd-questions@FreeBSD.ORG Subject: ipfilter Message-ID: <3B8E72BB.B824C21D@club-internet.fr>
next in thread | raw e-mail | index | archive | help
Hi
I'm having some problems with ipfilter :
# ipfstat -s
IP states added:
4572145 TCP
573649 UDP
463188 ICMP
1165608186 hits
34257625 misses
0 maximum
1546129 no memory
8208 bkts in use
22215 active
959216 expired
3081422 closed
# uptime
6:10PM up 1 day, 7:24, 2 users, load averages: 0.08, 0.12, 0.27
# uname -r
4.3-RELEASE-p14
as you can see, the no memory should stay at 0, but here, it's far from
good.
do you have some ideas...
btw, here are some things i've modified...
in /usr/src/sys/netinet/ip_state.c :
#define FIVE_DAYS (2*2*3600) /* 5 days: half closed session
*/
in /usr/src/sys/netinet/ip_state.h :
#define IPSTATE_SIZE 1613321
#define IPSTATE_MAX 1048576 /* Maximum number of states held */
any clue ?
--
Mathieu Arnold
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?3B8E72BB.B824C21D>