Monitoring Table Usage Count

[GuillaumeHullin]

Monitoring Table Usage Count

[rbicelli]

Hi!
I think is easy to implement with pfctl command:

pfctl -sm
states        hard limit   809000
src-nodes     hard limit   809000
frags         hard limit     5000
table-entries hard limit  1200000

Check https://www.openbsdhandbook.com/pf/cheat_sheet/

[rbicelli]

For example, for table usage, the syntax could be:

pfctl -s info | grep "current entries" | tr -s ' ' | cut -d " " -f4

[GuillaumeHullin]

For example, for table usage, the syntax could be:

pfctl -s info | grep "current entries" | tr -s ' ' | cut -d " " -f4

Correct me if I'm wrong but this is the state table.

I went through the link you sent (btw, now I know what "pf" means in the name pfSense)

Is this command make a logical result for you?

pfctl -vvsTables | grep 'Addresses:   ' | awk '{sum += $2} END {print sum}'

[rbicelli]

Looks like that

pfctl -s info | grep "current entries" | tr -s ' ' | cut -d " " -f4

Outputs a value closer to this:

pfctl -vvsTables | grep 'Addresses:   ' | awk '{sum += $2} END {print sum}'

outputs a value way higher than what is displayed in GUI (in my case 17281).

[rbicelli]

Sorry, I read with more attention what you wrote.
You want to monitor not only the state table but the whole table usage, so your one-liner return more meaningful value.