This is while it's working. I'll repost this tonight when I'm able to
hang it.

Status: Enabled for 0 days 16:47:54           Debug: Urgent

Interface Stats for gem0              IPv4             IPv6
  Bytes In                      1560279475              272
  Bytes Out                     1464940667              352
  Packets In
    Passed                         2348510                0
    Blocked                          88325                4
  Packets Out
    Passed                         2388368                2
    Blocked                             21                3

State Table                          Total             Rate
  current entries                      784
  searches                        18122501          299.7/s
  inserts                           106940            1.8/s
  removals                          106156            1.8/s
Counters
  match                             304496            5.0/s
  bad-offset                             0            0.0/s
  fragment                               2            0.0/s
  short                                  0            0.0/s
  normalize                              0            0.0/s
  memory                                 0            0.0/s
  bad-timestamp                          0            0.0/s
  congestion                           129            0.0/s
  ip-option                              0            0.0/s
  proto-cksum                          301            0.0/s
  state-mismatch                      1519            0.0/s
  state-insert                         903            0.0/s
  state-limit                            0            0.0/s
  src-limit                              0            0.0/s
  synproxy                               0            0.0/s
$ sudo pfctl -s memory
states        hard limit    10000
src-nodes     hard limit    10000
frags         hard limit     5000
tables        hard limit     1000
table-entries hard limit   100000
$


Chris

On Tue, 2006-11-14 at 13:05 -0500, Carlos A. Carnero Delgado wrote:
> Hi,
> 
> On 11/14/06, Chris Cameron <[EMAIL PROTECTED]> wrote:
> > I have a 3.8 PF/CARP setup that I can reproducibly screw up simply by
> > cat'ing lots of text over a telnet session.
> 
> can you post `pfctl -s info` and `pfctl -s memory`?
> 
> Best regards,
> Carlos.

Reply via email to