Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Herschel_Liang
Collaborator

Where can we find real concurrent in connection table?

Hi all,


[Expert@FW:0]# fw tab -t connections -s
HOST NAME ID #VALS #PEAK #SLINKS
localhost connections 8158 9699 337305 38548

[Expert@FW]# fw ctl pstat

...................

Connections:
1078998952 total, 928931831 TCP, 127222680 UDP, 22835242 ICMP,
9199 other, 9263 anticipated, 292674 recovered, 9663 concurrent,
328162 peak concurrent

...................

and smarttracker --> tab "active"

Bottom right corner    "Total records in file: 9165"?

It is different. Which is concurrent? Who can clarify this issue?

Best Regards!

0 Kudos
1 Reply
PhoneBoy
Admin
Admin

The connections table via fw tab -t connections -u is considered canonical.

However, a given connection can have multiple entries in this table.

I'm guessing SmartView Tracker is ignoring/consolidating those, thus why there is a difference in count.

0 Kudos

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events