[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [FW-1] Memory leaks - FP3 on Win2K - problem identified

Sounds like you're using w2k sp3? This problem is solved by rolling back from sp3 to sp2 on w2k.

Lars
-----Original Message-----
From: David Hassilev [mailto:[email protected]]
Sent: Friday, November 29, 2002 18:38
To: [email protected]
Subject: Re: [FW-1] Memory leaks - FP3 on Win2K - problem identified


 That's both good & bad news. I am having a similar problem. Recently upgraded fwd from 4.1 on NT to new hardware and NG FP3 on W2K. I was suspicious of a memory leak.

 My symptom is that the fwd will, after some lenght of time or amount of traffic will quit forwarding packets. You can still source from the gateway but any traffic passing through the gateway will simply go to a bit bucket. No errrors, other than the fwm will report the state as disconnected. A reboot of the box is the only way to clear it up.

 They gave me a hotfix, but after the hotfix the box stopped in under 6 hours so I pulled it out of production and went back to the 4.1. Checkpoint is also "working on it".

 Do the symptoms sound similar? I also "hardened" the box as you did. I found this to be much more problematic with W2K than with NT4.

/r
David

>>> [email protected] 11/25/02 01:11PM >>>

In case anyone else runs into this...
A while back I posted about severe (6 megs/hour) memory leaks on Windows 2000 with FP3. After working with Checkpoint we identified the cause of the problem. When I hardened Windows I disabled all non-essential services including Windows Management Instrumentation (WMI). Apparently the Checkpoint GUI has some dependency on this service as that is what caused the leak. The leak only occurs with the GUI open, but once the memory is consumed fwd.exe never releases it, so even occasional GUI use will cause memory use to continually climb. Enabling the WMI services (there are two) fixes the problem, but also enables what I consider a non-essential and potentially dangerous service.
Checkpoint (Israel) has been able to recreate the problem and they are "still investigating this issue".
Geoff

=================================================
To set vacation, Out Of Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================