HP-UX IPFilter Version 15.01 Administrator's Guide
ipl_suppress
The ipl_suppress parameter specifies the IPFilter logging behavior for identical log records.
When this feature is enabled (the value is 1), IPFilter suppresses identical log records; instead of
does not writing duplicate records, it writes the record and N where N is the number of times
the record was repeated. If this feature is disabled, IPFilter writes all log records, including
duplicate records.
Configuration UtilityDefault ValueRangeName
HP-UX 11i v1 and HP-UX 11i v2: ndd
HP-UX 11i v3: kctune
10 (disabled) - 1 (enabled)
ipl_suppress
ipl_logall
The ipl_logall parameter specifies if IPFilter includes the first 128 bytes of a packet in log
records or all the contents of a packet when the log body keywords are specified in a rule. By
default, this feature is disabled (ipl_logall is set to 0). Note that enabling this feature generates
large log files.
For information on changing the ipl_logall variable, see “Configuring and Viewing Kernel
Tunable Parameters” (page 139).
Configuration UtilityDefault ValueRangeName
HP-UX 11i v1 and HP-UX 11i v2: ndd
HP-UX 11i v3: kctune
00 (disabled) - 1 (enabled)
ipl_logall
Configuring and Viewing Kernel Tunable Parameters
The tool used to configure and view HP-UX IPFilter kernel tunable parameters depends on the
HP-UX version and the parameter.
Configuring Kernel Tunable Parameters on HP-UX 11i v3
On HP-UX 11i v3 systems, use the kctune command to configure and view HP-UX IPFilter
kernel tunable parameters.
Use the following syntax to configure the value of a kernel tunable:
kctune parameter_name=value
For example:
kctune ipl_logall=1
Use the following syntax to query the value of a kernel tunable:
kctune parameter_name
For example:
kctune ipl_logall
Configuring Kernel Tunable Parameters on HP-UX 11i v1 and HP-UX 11i v2
On HP-UX 11i v1 and HP-UX 11i v2, use the ndd command to configure all HP-UX IPFilter
kernel tunable parameters, with the following exceptions:
• fr_statemax and fr_tcpidletimeout: Use the kmtune command to modify these
parameters.
• ipf_icmp6_passthru: On HP-UX 11i v2, use the kctune command to modify this
parameter, as described in “Controlling ICMPv6 Router Discovery and Neighbor Discovery
Messages” (page 101)
ipl_suppress 139