From owner-freebsd-stable@FreeBSD.ORG  Wed May 14 15:25:44 2008
Return-Path: <owner-freebsd-stable@FreeBSD.ORG>
Delivered-To: freebsd-stable@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 302E81065679
	for <freebsd-stable@freebsd.org>; Wed, 14 May 2008 15:25:44 +0000 (UTC)
	(envelope-from vivek@khera.org)
Received: from yertle.kcilink.com (thingy.kcilink.com [74.92.149.59])
	by mx1.freebsd.org (Postfix) with ESMTP id 0D4748FC15
	for <freebsd-stable@freebsd.org>; Wed, 14 May 2008 15:25:44 +0000 (UTC)
	(envelope-from vivek@khera.org)
Received: from host-121.int.kcilink.com (host-121.int.kcilink.com
	[192.168.7.121])
	by yertle.kcilink.com (Postfix) with ESMTP id 90BD58A0B6
	for <freebsd-stable@freebsd.org>; Wed, 14 May 2008 11:25:43 -0400 (EDT)
Message-Id: <04EA1C34-AB7D-4A85-8A91-DED03E987706@khera.org>
From: Vivek Khera <vivek@khera.org>
To: FreeBSD Stable <freebsd-stable@freebsd.org>
Content-Type: text/plain; charset=US-ASCII; format=flowed; delsp=yes
Content-Transfer-Encoding: 7bit
Mime-Version: 1.0 (Apple Message framework v919.2)
Date: Wed, 14 May 2008 11:25:43 -0400
X-Mailer: Apple Mail (2.919.2)
Subject: how much memory does increasing max rules for IPFW take up?
X-BeenThere: freebsd-stable@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: Production branch of FreeBSD source code <freebsd-stable.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-stable>, 
	<mailto:freebsd-stable-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-stable>
List-Post: <mailto:freebsd-stable@freebsd.org>
List-Help: <mailto:freebsd-stable-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-stable>,
	<mailto:freebsd-stable-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 14 May 2008 15:25:44 -0000

I had a box run out of dynamic state space yesterday.  I found I can  
increase the number of dynamic rules by increasing the sysctl  
parameter net.inet.ip.fw.dyn_max.  I can't find, however, how this  
affects memory usage on the system.  Is it dyanamically allocated and  
de-allocated, or is it a static memory buffer?

Thanks!