Symptom
++ "show elephant-flow status" returns no output
> show elephant-flow status
>
++ Content of /ngfw/var/sf/detection_engines//lua/efd.lua is like below:
pzk8j:.../lua$ cat efd.lua
-- Efd Configuration
custom_efd = {}
efd = util.merge(efd, custom_efd)
Conditions
Only applied to FTD: 7.1.0
Further Problem Description
++ If the efd.lua file is empty, snorts takes the default option i.e. enable
++ This defect will help FTD return the current status of EFD(Elephant Flow Detection) irrespective of the content of the efd.lua file.