snarohyans
join:2005-11-10
Indianapolis, IN
| reply to highland8
Re: pix and fragment riddle
It looks to me like there is a portion missing to that question...
Typically when executing that command, you should get the following:
pixfirewall(config)# show fragment outside
Interface: outside
Size:2000, Chain:45, Timeout:10
Queue:1060, Assemble:809, Fail:0, Overflow:0
Which indicates:
•A database size limit of 2000 packets.
•The chain length limit of 45 fragments.
•A timeout of ten seconds.
•1060 packets currently awaiting re-assembly.
•809 packets have been fully reassembled.
•No failure.
•No overflow.
Therefore, to answer the question, you would add up the queue and assembled tallies to come up with a total of the number of fragmented packets that have entered the interface.
It sounds incomplete to me, but I might be missing something 
Hope this helps!
Aaron |
