topic Re: Where can we find real concurrent in connection table? in Firewall and Security Management https://community.checkpoint.com/t5/Firewall-and-Security-Management/Where-can-we-find-real-concurrent-in-connection-table/m-p/11635#M754 <HTML><HEAD></HEAD><BODY><P>The connections table via <STRONG>fw tab -t connections -u</STRONG>&nbsp;is considered canonical.</P><P>However, a given&nbsp;connection can have multiple entries in this table.</P><P></P><P>I'm guessing SmartView Tracker is ignoring/consolidating those, thus why there is a difference in count.</P></BODY></HTML> Mon, 02 Apr 2018 19:29:59 GMT PhoneBoy 2018-04-02T19:29:59Z Where can we find real concurrent in connection table? https://community.checkpoint.com/t5/Firewall-and-Security-Management/Where-can-we-find-real-concurrent-in-connection-table/m-p/11634#M753 <HTML><HEAD></HEAD><BODY><P>Hi all,</P><P><BR />[Expert@FW:0]# fw tab -t connections -s<BR />HOST NAME ID #VALS #PEAK #SLINKS<BR />localhost connections 8158 <STRONG>9699</STRONG> 337305 38548</P><P></P><P>[Expert@FW]# <STRONG>fw ctl pstat</STRONG></P><P>...................</P><P>Connections:<BR /> 1078998952 total, 928931831 TCP, 127222680 UDP, 22835242 ICMP,<BR /> 9199 other, 9263 anticipated, 292674 recovered, <STRONG>9663</STRONG> concurrent,<BR /> 328162 peak concurrent</P><P>...................</P><P>and smarttracker --&gt; tab "active"</P><P>Bottom right corner &nbsp; &nbsp;"Total records in file: 9165"?</P><P></P><P>It is different. Which is&nbsp;concurrent? Who can clarify this issue?</P><P></P><P>Best Regards!</P></BODY></HTML> Mon, 02 Apr 2018 08:49:27 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Where-can-we-find-real-concurrent-in-connection-table/m-p/11634#M753 Herschel_Liang 2018-04-02T08:49:27Z Re: Where can we find real concurrent in connection table? https://community.checkpoint.com/t5/Firewall-and-Security-Management/Where-can-we-find-real-concurrent-in-connection-table/m-p/11635#M754 <HTML><HEAD></HEAD><BODY><P>The connections table via <STRONG>fw tab -t connections -u</STRONG>&nbsp;is considered canonical.</P><P>However, a given&nbsp;connection can have multiple entries in this table.</P><P></P><P>I'm guessing SmartView Tracker is ignoring/consolidating those, thus why there is a difference in count.</P></BODY></HTML> Mon, 02 Apr 2018 19:29:59 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Where-can-we-find-real-concurrent-in-connection-table/m-p/11635#M754 PhoneBoy 2018-04-02T19:29:59Z