Leave a Reply 3

Your email address will not be published. Required fields are marked *


prosto_marussia

prosto_marussia

Here is output of statistics file:

[Expert@Firewall]# cat /proc/ppk/statistics
Name Value Name Value
——————– ————— ——————– —————
conns created 84416 conns deleted 84410
temporary conns 0 templates 0
nat conns 6051 accel packets 0
accel bytes 0 F2F packets 158880562
ESP enc pkts 0 ESP enc err 0
ESP dec pkts 0 ESP dec err 0
ESP other err 0 espudp enc pkts 0
espudp enc err 0 espudp dec pkts 0
espudp dec err 0 espudp other err 0
AH enc pkts 0 AH enc err 0
AH dec pkts 0 AH dec err 0
AH other err 0 memory used 0
free memory 0 acct update interval 30
current total conns 6 TCP violations 0
conns from templates 0 TCP conns 5
delayed TCP conns 0 non TCP conns 1
delayed nonTCP conns 0 F2F conns 6
F2F bytes 16066670783 crypt conns 0
enc bytes 0 dec bytes 0
partial conns 0 anticipated conns 0
dropped packets 0 dropped bytes 0
nat templates 0 port alloc templates 0
conns from nat templ 0 port alloc conns (tm 0
port alloc f2f 0 PXL templates 0
PXL conns 0 PXL packets 0
PXL bytes 0 PXL async packets 0
conns auto expired 0 C used templates 0
pxl tmpl conns 0 C conns from tmpl 0
C non TCP F2F conns 1 C tcp handshake conn 0
C tcp established co 5 C tcp closed conns 0
C tcp f2f handshake 0 C tcp f2f establishe 5
C tcp f2f closed con 0 C tcp pxl handshake 0
C tcp pxl establishe 0 C tcp pxl closed con 0

prosto_marussia

prosto_marussia

While fwaccel stat shows only summary.

[Expert@Firewall]# fwaccel stat
Accelerator Status : on
Accept Templates : enabled
Drop Templates : disabled
NAT Templates : disabled by user

Accelerator Features : Accounting, NAT, Cryptography, Routing,
HasClock, Templates, Synchronous, IdleDetection,
Sequencing, TcpStateDetect, AutoExpire,
DelayedNotif, TcpStateDetectV2, CPLS, WireMode,
DropTemplates, NatTemplates, Streaming,
MultiFW, AntiSpoofing, ViolationStats,
Nac, AsychronicNotif, ERDOS
Cryptography Features : Tunnel, UDPEncapsulation, MD5, SHA1, NULL,
3DES, DES, CAST, CAST-40, AES-128, AES-256,
ESP, LinkSelection, DynamicVPN, NatTraversal,
EncRouting, AES-XCBC, SHA256

prosto_marussia

prosto_marussia

Instead of cat /proc/ppk/statistics you can also use fwaccel stats -l. Outputs are equal.