Re: [FW-1] Normal Memory Utilization for a Nokia IP330

Subject: Re: [FW-1] Normal Memory Utilization for a Nokia IP330

From: "<Aaron Reynolds>" <[email protected]>

Date: Tue, 10 Dec 2002 14:08:01 -0700

Reply-To: Mailing list for discussion of Firewall-1 <[email protected]>

Sender: Mailing list for discussion of Firewall-1 <[email protected]>

Title: Message

Looks like the latest ipso added some stuff to the commnd line result. I am not sure what "#SLINKS" is, but the "#VALS" is current active connections, "#PEAK" must be the peak connections, although, I don't know if that is since last reboot, last policy push, or what. At any rate, connections are not your problem, at least not at the time of running this. Did you have the high memory utilization at the time of running this command?

-----Original Message-----
From: Nall, Robert [mailto:[email protected]]
Sent: Tuesday, December 10, 2002 11:55 AM
To: [email protected]
Subject: Re: [FW-1] Normal Memory Utilization for a Nokia IP330

well not to keen on the command line... but this is what I got from the "fw tab -t connections -s"

FW[admin]# fw tab -t connections -s
HOST NAME ID #VALS #PEAK #SLINKS
localhost connections 8158 37 663 136

Got me on what it means, but I bet after you tell me I will never forget!!

The other two command lines, I couldn't get to run...

-----Original Message-----
From: <Aaron Reynolds> [mailto:[email protected]]
Sent: Tuesday, December 10, 2002 11:38 AM
To: [email protected]
Subject: Re: [FW-1] Normal Memory Utilization for a Nokia IP330

The number of users behind is not the issue. Number of connections and number of NAT'd connections is a much better indicator. Can you run a "fw tab -t connections -s" and get the number of connections running through the box? Also, run "fw tab -t fwx_forw -t fwx_backw -s to get the number of forward and backward NAT connections. This will give two numbers that should be pretty close to each other. If you are running hide NAT, the numbers could be very close to the number of connections from your "fw tab -t connections -s" command. Let me know.

-Aaron

-----Original Message-----
From: Nall, Robert [mailto:[email protected]]
Sent: Tuesday, December 10, 2002 9:38 AM
To: [email protected]
Subject: [FW-1] Normal Memory Utilization for a Nokia IP330

We have a Nokia IP330 running Checkpoint NG FP3 & latest IPSO.

The issue we have is that the memory utilization is running about 85-90% with only about 250-300 users behind it. I did not know if this was normal or not...

I recently just found out that its memory is only upgradeable to 256 Meg of which I already have installed.

Could anyone elaborate if this is normal, or should I consider upgrading to a bigger box.

Thanks,

__________________________________________
Robert Nall
Network Administrator
Riley County - Information Systems
110 Courthouse Plaza
Manhattan, KS 66502
Phone: (785) 537-6309
Fax:
[email protected]