HP-UX IPFilter Version 17 Administrator's Guide

C.5.1 Displaying Logging Buffer Statistics
On HP-UX 11i v3 systems, the ipfstat –B command displays the size of the log buffer, the
current number of bytes used, and the high-water mark (the maximum number of bytes used).
On HP-UX 11i v1 and HP-UX 11i v2 systems, use the following command to get the logging
buffer statistics:
ndd -get /dev/pfil cur_iplbuf_sz
The parameter cur_iplbuf_sz is a read-only parameter.
C.6 ipl_suppress
The ipl_suppress parameter specifies the IPFilter logging behavior for identical log records.
When this feature is enabled (the value is 1), IPFilter suppresses identical log records; instead of
does not writing duplicate records, it writes the record and N where N is the number of times
the record was repeated. If this feature is disabled, IPFilter writes all log records, including
duplicate records.
Configuration UtilityDefault ValueRangeName
HP-UX 11i v1 and HP-UX 11i v2: ndd
HP-UX 11i v3: kctune
10 (disabled) - 1 (enabled)
ipl_suppress
C.7 ipl_logall
The ipl_logall parameter specifies if IPFilter includes the first 128 bytes of a packet in log
records or all the contents of a packet when the log body keywords are specified in a rule. By
default, this feature is disabled (ipl_logall is set to 0). Note that enabling this feature generates
large log files.
For information on changing the ipl_logall variable, see “Configuring and Viewing Kernel
Tunable Parameters” (page 145).
Configuration UtilityDefault ValueRangeName
HP-UX 11i v1 and HP-UX 11i v2: ndd
HP-UX 11i v3: kctune
00 (disabled) - 1 (enabled)
ipl_logall
C.8 Configuring and Viewing Kernel Tunable Parameters
The tool used to configure and view HP-UX IPFilter kernel tunable parameters depends on the
HP-UX version and the parameter.
C.8.1 Configuring Kernel Tunable Parameters on HP-UX 11i v3
On HP-UX 11i v3 systems, use the kctune command to configure and view HP-UX IPFilter
kernel tunable parameters.
Use the following syntax to configure the value of a kernel tunable:
kctune parameter_name=value
For example:
kctune ipl_logall=1
Use the following syntax to query the value of a kernel tunable:
kctune parameter_name
For example:
kctune ipl_logall
C.6 ipl_suppress 145