How to determine the actual number of firewall table entries?

[pslinn]

I would like to compare the Firewall Maximum Table Entries limit against the actual number of table entries. How do you determine the actual number of firewall table entries?

Regards.

[viktor_g]

You can see it on the Diagnostics / Tables page:

or in shell:

pfctl -t pfB_PRI1_v4 -T show | wc -l
633

[pslinn]

Thanks. I was not aware of that. This helps.

This number represents the total for each table. Is there no existing function which sums all the totals for each table into one total for the system, or do I need to write a script for that?

Regards.

[viktor_g]

@pslinn right, you need to write a script for that

also check the pfctl -vvsTables command

[pslinn]

@viktor_g said in How to determine the actual number of firewall table entries?:

pfctl -vvsTables

Thanks. I will give this a try.

Regards

[jimp]

While not 100% accurate as there are lines taken up by the table name headers and blank lines between tables, this gets you close:

: pfSsh.php playback pftabledrill | wc -l
  113255

[pslinn]

This gets very close. Very usable. Thank you.