Using Monitor
Issue 4 May 2005 261
Bad State Alloc
In Number of failed attempts to allocated State
table entries for inbound packets. This occurs
when a filter rule is declared using the ‘keep
state’ option. Packets that match the rule
cause a State table entry to be allocated. This
allows expected return packets to bypass
other filtering rules that might normally block
them. Allocation fails if the State table is full
and a new entry cannot be allocated.
Bad State Alloc
Out Number of failed attempts to allocated State
table entries for outbound packets. This occurs
when a filter rule is declared using the ‘keep
state’ option. Packets that match the rule
cause a State table entry to be allocated. This
allows expected return packets to bypass
other filtering rules that might normally block
them. Allocation fails if the State table is full
and a new entry cannot be allocated.
Keep State
Alloc In Number of successful attempts to allocated
State table entries for inbound packets. This
occurs when a filter rule is declared using the
‘keep state’ option. Packets that match the rule
cause a State table entry to be allocated. This
allows expected return packets to bypass
other filtering rules that might normally block
them.
Keep State
Alloc Out Number of successful attempts to allocated
State table entries for outbound packets. This
occurs when a filter rule is declared using the
‘keep state’ option. Packets that match the rule
cause a State table entry to be allocated. This
allows expected return packets to bypass
other filtering rules that might normally block
them.
Cache Hit In Number of cache hits for inbound packets on
this interface. Each inbound packet is
examined to see if a packet with identical
characteristics exists in the outbound cache
for this interface. If a match is found, the
resulting rule match applied to the previous
packet is applied to the current one, bypassing
the rest of the filtering mechanism.
Table 23: FilterStats Parameters (continued)
Parameter Description
5 of 7