<![CDATA[Updaterrd.sh]]>$pfstats
$pfnat
$srcip
$dstip

they all use  /sbin/pfctl -ss, which results in high cpu when the states table grows big.
so, why not output to a file and reuse the file?

]]>https://forum.netgate.com/topic/4899/updaterrd-shRSS for NodeTue, 13 Oct 2026 22:52:58 GMTThu, 14 Jun 2007 06:56:55 GMT60<![CDATA[Reply to Updaterrd.sh on Sun, 17 Jun 2007 15:47:45 GMT]]>@cmb:

Does that make a major, measurable difference? If so, I'm sure patches would be welcome.

sbin/pfctl -ss on my machine lasts about 5 seconds with the states table about 60K, 4 times is about 20 seconds.
reusing a file can reduces total time down to about 5 seconds.

]]>https://forum.netgate.com/post/156481https://forum.netgate.com/post/156481Sun, 17 Jun 2007 15:47:45 GMT<![CDATA[Reply to Updaterrd.sh on Thu, 14 Jun 2007 22:26:11 GMT]]>@coolgg:

after the default gateway changed, the ping destination ip test in updaterrd.sh doesnt change.

Yeah I think I noticed the same on one of my installs just in the past couple days.

@coolgg:

$pfstats
$pfnat
$srcip
$dstip

they all use  /sbin/pfctl -ss, which results in high cpu when the states table grows big.
so, why not output to a file and reuse the file?

Does that make a major, measurable difference? If so, I'm sure patches would be welcome.

]]>https://forum.netgate.com/post/156400https://forum.netgate.com/post/156400Thu, 14 Jun 2007 22:26:11 GMT<![CDATA[Reply to Updaterrd.sh on Thu, 14 Jun 2007 06:59:48 GMT]]>forgot the version is 1.2-beta1
after the default gateway changed, the ping destination ip test in updaterrd.sh doesnt change.

]]>https://forum.netgate.com/post/156369https://forum.netgate.com/post/156369Thu, 14 Jun 2007 06:59:48 GMT