[FW1] Problems with FW memory

[checkpoint <lfw1@FW1-NOSPAMpert.com.ar>]

Hi,
We are experiencing some problems with our firewall, it's rebooting on it's
own. 
It's a SUN 3500 box with Solaris 7 and FW-1 4.1 SP1.

The output of the 'fw ctl pstat' command just before the rebooting was:

Hash kernel memory (hmem) statistics:
  Total memory allocated: 9094728 bytes in 2219 4KB blocks using 1 pool
  Total memory bytes  used:  4436936   unused:  4657792 (51%)   peak:
5734144
  Total memory blocks used:     1356   unused:      863 (38%)
  Allocations: 433388087 alloc, 0 failed alloc, 433321968 free
System kernel memory (kmem) statistics:
  System physical memory: 756596736 bytes
  Available physical memory: 182747136 bytes
  Total memory bytes  used: 10806498   peak: 16366686
  Allocations: 9725969 alloc, 0 failed alloc, 9725342 free, 0 failed free
Inspct: 619411159 packets, -385784926 operations,lookups,
262599892 record, -197
9826106 extract
Cookies:total, 0 alloc, 0 free, 32892 dup, -768728887 get,
61737044 put, 619487
563 len, 0 chain alloc, 0 chain free
Fragments: 162312 fragments, 57560 expired, 49643 packets
Encryption: 0 encryption, 0 decryption, 0 short, 0 failures
Translation: 30883691/-900709491 forw, 31099925/-863091797 bckw, 61262867
tcpudp, 720749 icm
p,374 alloc


And the output of the 'fw tab -t connections -s' command was:

HOST                  NAME                          ID  #VALS
localhost             connections                   19  58033

So, we have:
756596736 bytes of total available physical memory and only 10806498 total
memory bytes used. On the other hand, the memory available for the firewall
is 9094728 bytes and only 51% was being used. 

In the /var/adm/messages we have the following error:

May 28 13:27:18 XXXX unix: panic[cpu18]/thread=40235e60:
May 28 13:27:18 XXXX unix: FW-1: out of stacks

and then it reboots.

Could it be that we are having memory problems? The maximum of connections
is set to 75000, so I think that's not the problem.

Any help will be appreciated, this firewall is very critical to the
organization.
Thanks in advance,

Maria Elinger
Pert Consultores SRL



================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================