- Access exclusive content
- Connect with peers
- Share your expertise
- Find support resources
07-04-2013 11:12 PM
on pa2020 and pa2050 that is different
I checked on Pa2050 it is
cfg.general.ctd.max-dfilters: 131072
I also checked on Pa5050
and as you said
cfg.general.ctd.max-dfilters: ( 262144, 1048576, )
that comes.I don't know why there are 2 here.Someone will tell us why there are more than 1 limit here for 5000 series.
I was not sure about the command just checked after your question because all limits can be shown in system state and it looks like that dfilter is what you look for.But it will be good if we can learn what is different with 5000 series.
07-04-2013 04:00 AM
This should give you the limit if I am not wrong
show system state | match dfilter
Also on 3020 it is 65536
07-04-2013 04:10 AM
Also pa200 and pa500 should be reverse I think
pa200 is 32768
07-04-2013 06:45 PM
Thank you for info.
This command result is Daily packet capture limit?
>>>>Also pa200 and pa500 should be reverse I think
>>>>
>>>>pa200 is 32768
Thank you for your comment.
This is Good answer!!
I checked PA-200 and PA-500, same result(32768).
But, I have questions more.
I confirm this command on the PA-2000 device.
Command result is following.
------------------
PA2020> show system state | match dfilte
cfg.general.ctd.max-dfilters: 65536
------------------
PA-2000 is not 131072?
this 65536 is answer?
""""general,high,"Daily packet capture limit (directory threat/20110408\, limit 131072)""""
This log is what devices log(limit 131072)?
And, PA-5000 is....
cfg.general.ctd.max-dfilters: ( 262144, 1048576, 1048576, )
running on PA-5060.
I think that any dpx parameter.
> PA-5000 : 786432?????
Regards,
07-04-2013 11:12 PM
on pa2020 and pa2050 that is different
I checked on Pa2050 it is
cfg.general.ctd.max-dfilters: 131072
I also checked on Pa5050
and as you said
cfg.general.ctd.max-dfilters: ( 262144, 1048576, )
that comes.I don't know why there are 2 here.Someone will tell us why there are more than 1 limit here for 5000 series.
I was not sure about the command just checked after your question because all limits can be shown in system state and it looks like that dfilter is what you look for.But it will be good if we can learn what is different with 5000 series.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!