Firewall-1

[FW-1] Questions on connection tables and memory for synchronization

Subject: [FW-1] Questions on connection tables and memory for synchronization
From: "K. H. Cheung" <cckwokho AT UST DOT HK>
To: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
Date: Fri, 22 Apr 2005 16:06:17 +0800
Dear all,

I would like to ask a few questions about the FW connection tables and
memory
consumption for synchronization.

1) What's the difference between the FW connection table (fw tab -t
connections)
and the accelerator's connections table (fwaccel conns)?  I mean, if I am
only
interested on the source/destination information of current connections,
then do
both tables provide the same information?

2) When I tried to print the FW connection table (fw tab -t connections),
the
error "Table connections not loaded" returned.  As I learnt, this is due to
insufficient hardwired (non-swappable) memory.  Is there anyway to
increase the hardwired memory?

3) I learnt from the release note of HFA_R55_12 that it's possible to limit
the
amount of buffers for synchronization by setting fw_sync_thresh_buf_mem.
Although the release note suggests the value to be between 10%-20%, I don't
know if it's suitable for my case.  Is there any way to monitor the amount
of memory used by synchronization so that I can tune fw_sync_thresh_buf_mem
accordingly?

Thanks a lot.

Regards,
 K.H. Cheung
 Information Technology Services Ceter
 Hong Kong University of Science & Technology

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================

<Prev in Thread] Current Thread [Next in Thread>