pfsense state issue

[tomli]

Hi All,

My pfsense version is 2.5.2
In normal status, I can see about ~20000 records in state table. Sometimes I can see ~ 4M records in state table in this month. It will auto resume about 2 mins. I try to dump the state packets in sync interface for analysis. However, the packet are encrypted, I cannot use it for debug. Please teach me how to find the state for what.

Thanks

[stephenw10]

You can see the state table is the gui in Diag > States but with that many states you would need to enable the state filter requirement in Sys > General setup. Otherwise it will try to display the entire table and at 4M that will hang the GUI.
You can also do it from the CLI using: pfctl -ss | grep ??? where ??? is whatever you're looking for.

Steve