Date: Thu, 30 Aug 2001 18:12:07 +0200 From: Mathieu Arnold <arn_mat@club-internet.fr> To: net@freebsd.org Subject: ipfilter Message-ID: <3B8E65D7.EE5DE38B@club-internet.fr>
next in thread | raw e-mail | index | archive | help
Hi I'm having some problems with ipfilter : # ipfstat -s IP states added: 4572145 TCP 573649 UDP 463188 ICMP 1165608186 hits 34257625 misses 0 maximum 1546129 no memory 8208 bkts in use 22215 active 959216 expired 3081422 closed # uptime 6:10PM up 1 day, 7:24, 2 users, load averages: 0.08, 0.12, 0.27 # uname -r 4.3-RELEASE-p14 as you can see, the no memory should stay at 0, but here, it's far from good. do you have some ideas... btw, here are some things i've modified... in /usr/src/sys/netinet/ip_state.c : #define FIVE_DAYS (2*2*3600) /* 5 days: half closed session */ in /usr/src/sys/netinet/ip_state.h : #define IPSTATE_SIZE 1613321 #define IPSTATE_MAX 1048576 /* Maximum number of states held */ any clue ? -- Mathieu Arnold To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-net" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?3B8E65D7.EE5DE38B>