Where can we find real concurrent in connection table?

[Herschel_Liang]

Hi all,

[Expert@FW:0]# fw tab -t connections -s
HOST NAME ID #VALS #PEAK #SLINKS
localhost connections 8158 9699 337305 38548

[Expert@FW]# fw ctl pstat

...................

Connections:
1078998952 total, 928931831 TCP, 127222680 UDP, 22835242 ICMP,
9199 other, 9263 anticipated, 292674 recovered, 9663 concurrent,
328162 peak concurrent

...................

and smarttracker --> tab "active"

Bottom right corner    "Total records in file: 9165"?

It is different. Which is concurrent? Who can clarify this issue?

Best Regards!

[PhoneBoy]

The connections table via fw tab -t connections -u is considered canonical.

However, a given connection can have multiple entries in this table.

I'm guessing SmartView Tracker is ignoring/consolidating those, thus why there is a difference in count.