HP-UX IPFilter Version 15.01 Administrator's Guide

In the previous rule, log limit freq 5 specifies that the log records should be printed for
every five connections that exceeds the connection limit of 10. If 100 connections are established,
IPFilter logs the eleventh, sixteenth, twenty-first, and so on.
Cumulative limits are shared by different IP addresses and it is possible that IPFilter will not log
connections from some source IP addresses. For example, the initial connections might come
from ipaddr1 and the next 10 from ipaddr2. IPFilter will not log the connections from ipaddr1,
but will log the connections from ipaddr2, because one of its connections will be the eleventh
connection.
52 Configuring and Loading Dynamic Connection Allocation (DCA) Rules