topic Re: F2V-reason in cpview, not understandable values in Firewall and Security Management

F2V-reason in cpview, not understandable values

Wolfgang — Tue, 09 Nov 2021 09:54:25 GMT

Hello CheckMates,

can someone explain the following values from cpview. These are seen sometimes, looks like every 5minutes.

Second screenshot shows the same value for every entry ?

Re: F2V-reason in cpview, not understandable values

PhoneBoy — Thu, 11 Nov 2021 21:03:24 GMT

It's not the same numbers in the second one, though they are...quite big.
Integer overflow, maybe?

Re: F2V-reason in cpview, not understandable values

_Val_ — Mon, 15 Nov 2021 07:50:50 GMT

F2V is the flag for a packet which is re-injected back to SXL from FW (new to R80.20 and up SXL). Those are number of packets with this flag. As Dameon said, the numbers are big, but not impossible. What is an uptime on this box?

Re: F2V-reason in cpview, not understandable values

HristoGrigorov — Mon, 15 Nov 2021 08:07:59 GMT

This usually happens when you do fwaccel stats -r (reset stats). After some time it shall fix by itself.

Re: F2V-reason in cpview, not understandable values

Wolfgang — Mon, 15 Nov 2021 18:40:45 GMT

Uptime on this box is 20 days. Normally we could see values of 2 - 8 for sim_reused_established, nothing else.

The high values from the second screenshot are seen in a periodically timeframe all the time.

@HristoGrigorov fwaccel stats -r changes nothing.

Re: F2V-reason in cpview, not understandable values

_Val_ — Tue, 16 Nov 2021 07:39:40 GMT

Something is not okay then.

@Arik_Ovtracht can someone from your team take a look, please?

Re: F2V-reason in cpview, not understandable values

Timothy_Hall — Tue, 16 Nov 2021 16:08:07 GMT

Looks like a display glitch in cpview and probably not a real underlying problem. If you convert some of those decimal values to hex and binary you can see they are bumping up against the maximum size/precision of the cpview display variable, or possibly have wrapped around backwards from the precision upper boundary FFFFFFFFFFFFFFFF:

18,446,744,073,709,212,468
FFFFFFFFFFFAD334
1111111111111111111111111111111111111111111110101101001100110100

18,446,744,073,708,827,132
FFFFFFFFFFF4F1FC
1111111111111111111111111111111111111111111101001111000111111100

Re: F2V-reason in cpview, not understandable values

Arik_Ovtracht — Wed, 17 Nov 2021 11:49:45 GMT

You are correct, and we are actually working on a fix for this bug.