HP-UX IPFilter A.03.05.13 Administrator's Guide: HP-UX 11i v3

Table Of Contents
Installing and Configuring HP-UX IPFilter
Kernel Tunable Parameters
Chapter 114
Kernel Tunable Parameters
IPFilter provides additional configuration options, such as the following
kernel tunables variables.
NOTE The kctune command is now used to configure kernel tunables. The ndd
command and its variables are not supported.
The following sections provide information about kernel tunables and
how to use the kctune command to configure the kernel tunables.
fr_tcpidletimeout
The purpose of fr_tcpidletimeout is to determine the timeout period of
states kept on TCP connections that are idle.
Tunable Name Description
Default
Value
fr_tcpidletimeout The timeout period of states kept
on TCP connections that are idle.
86,400
seconds
fr_statemax Restricts the number of state
entries that can be created.
800,000
entries
ipl_buffer_sz Size of the IPFilter logging buffer
for /dev/ipl.
8192
bytes
ipl_suppress If set, does not print identical log
records separately, but counts
them as Nx, where N is the
number of times the log record
occurs.
1
ipl_logall If set, the entire packet is logged.
Otherwise, only the first 128 bytes
are logged. This should be used
with the log body rules.
0