From owner-freebsd-current Fri Sep 14 11:47:49 2001 Delivered-To: freebsd-current@freebsd.org Received: from reservoir.absolight.com (reservoir.absolight.com [212.43.217.72]) by hub.freebsd.org (Postfix) with ESMTP id 62E1037B40F for ; Fri, 14 Sep 2001 11:47:45 -0700 (PDT) Received: from bilbo.in.mat.cc (bilbo.in.mat.cc [212.43.217.121]) by reservoir.absolight.com (Postfix) with ESMTP id C593BD39EF for ; Fri, 14 Sep 2001 20:47:42 +0200 (CEST) Received: from bilbo.org (localhost [127.0.0.1]) by bilbo.in.mat.cc (Postfix) with ESMTP id 11B3165554 for ; Fri, 14 Sep 2001 20:47:36 +0200 (CEST) Received: from club-internet.fr (sauron.in.mat.cc [212.43.217.122]) by bilbo.in.mat.cc (Postfix) with ESMTP id 324FB65554 for ; Fri, 14 Sep 2001 20:47:33 +0200 (CEST) Message-ID: <3BA250C5.AF6B8107@club-internet.fr> Date: Fri, 14 Sep 2001 20:47:33 +0200 From: Mathieu Arnold Organization: http://www.absolight.com/ X-Mailer: Mozilla 4.76 [en] (Windows NT 5.0; U) X-Accept-Language: en MIME-Version: 1.0 To: freebsd-current@freebsd.org Subject: ipfilter and memory problem Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Sender: owner-freebsd-current@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG Hi I still have some no memory problem : http://www.absolight.fr/mat/ipf/ here is how it was this morning : IP states added: 11508117 TCP 1757381 UDP 1512795 ICMP 3225071612 hits 101807088 misses 0 maximum 586718 no memory 5055 bkts in use 32424 active 3239108 expired 10920043 closed here is what's in my ip_state.c #define FIVE_DAYS (3600) /* 5 days: half closed session */ #define TCP_MSL 60 /* 2 minutes */ u_long fr_tcpidletimeout = FIVE_DAYS, fr_tcpclosewait = 2 * TCP_MSL, fr_tcplastack = 2 * TCP_MSL, fr_tcptimeout = 2 * TCP_MSL, fr_tcpclosed = 2, fr_tcphalfclosed = 30*60, /* 2 hours */ fr_udptimeout = 240, fr_icmptimeout = 120; int fr_statemax = IPSTATE_MAX, fr_statesize = IPSTATE_SIZE; int fr_state_doflush = 0, fr_state_lock = 0; and in my ip_state.h : #define IPSTATE_SIZE 100823 #define IPSTATE_MAX 65536 /* Maximum number of states held */ It's a FreeBSD mano.absolight.com 4.3-RELEASE-p17 FreeBSD 4.3-RELEASE-p17 #0: Mon Sep 10 09:55:30 CEST 2001 root@mano.absolight.com:/usr/src/sys/compile/FW i386 with 256M of ram, and kern.ipc.nmbclusters="16384" kern.vm.kmem.size="83886080" in my loader.conf I was wondering how low I could go with the FIVE_DAYS const and with the others. I believe that lowering them should do it, but I'd rather not do stupid things. regards -- Mathieu Arnold To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-current" in the body of the message