From owner-freebsd-pf@FreeBSD.ORG Tue Jan 23 14:41:34 2007 Return-Path: X-Original-To: freebsd-pf@freebsd.org Delivered-To: freebsd-pf@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id 03D5616A400 for ; Tue, 23 Jan 2007 14:41:34 +0000 (UTC) (envelope-from dudu.meyer@gmail.com) Received: from nf-out-0910.google.com (nf-out-0910.google.com [64.233.182.185]) by mx1.freebsd.org (Postfix) with ESMTP id 86A2F13C455 for ; Tue, 23 Jan 2007 14:41:33 +0000 (UTC) (envelope-from dudu.meyer@gmail.com) Received: by nf-out-0910.google.com with SMTP id m19so253659nfc for ; Tue, 23 Jan 2007 06:41:29 -0800 (PST) DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=beta; h=received:message-id:date:from:to:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=eSP7vmB9Bk0RmD1N50J+voyQdMlIajP1GMpFXppf67PdBlZ0jPEeLs0SGi7B961AzJSUm0FNBLZtt+nyZM7WB6x1LzmQEtFqMqtQLkkQlOZiyPoZEYCvTU/VKTVWChLZoR9/OW9t2X2TftKC0cQirDWyCGqxKGHzyB5Mk4scNVM= Received: by 10.49.91.6 with SMTP id t6mr1217209nfl.1169563288606; Tue, 23 Jan 2007 06:41:28 -0800 (PST) Received: by 10.66.220.12 with HTTP; Tue, 23 Jan 2007 06:41:28 -0800 (PST) Message-ID: Date: Tue, 23 Jan 2007 12:41:28 -0200 From: "Eduardo Meyer" To: freebsd-pf@freebsd.org In-Reply-To: MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Content-Disposition: inline References: <200701231402.20264.max@love2party.net> Subject: Re: set limit { states X, frags Y } not working - buggy? X-BeenThere: freebsd-pf@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Technical discussion and general questions about packet filter \(pf\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 23 Jan 2007 14:41:34 -0000 Fixed after upgrading to 6.2-STABLE. Now it works just fine - I had 6.1-PRERELEASE before. Thank you. > # vmstat -z | grep ^pf > pfsrctrpl: 100, 10023, 0, 78, 77 > pfrulepl: 604, 0, 140, 88, 17555 > pfstatepl: 260, 5010, 8096, 1879, 38569766 > pfaltqpl: 128, 0, 0, 0, 0 > pfpooladdrpl: 68, 0, 72, 152, 8534 > pfrktable: 1240, 0, 5, 4, 89 > pfrkentry: 156, 0, 10, 40, 481 > pfrkentry2: 156, 0, 0, 0, 0 > pffrent: 16, 2639, 0, 0, 0 > pffrag: 48, 0, 0, 0, 0 > pffrcache: 48, 10062, 0, 0, 0 > pffrcent: 12, 50141, 0, 0, 0 > pfstatescrub: 28, 0, 0, 0, 0 > pfiaddrpl: 92, 0, 12, 114, 260 > pfospfen: 108, 0, 345, 51, 22770 > pfosfp: 28, 0, 188, 193, 12408 > > Right now I have some fewer sessions: > > # pfctl -s info | grep "current entries" > current entries 8306 > > But way higher than the configured limit of 5k. -- =========== Eduardo Meyer pessoal: dudu.meyer@gmail.com profissional: ddm.farmaciap@saude.gov.br