ÂÂÂÂÂÂÂÂÂÂÂ IP650 - Pent III ,700 MHZ
-----Original
Message-----
From: Mailing list for discussion
of Firewall-1 [mailto:[email protected]]On Behalf Of <Aaron Reynolds>
Sent: Tuesday, December 17, 2002
9:32 PM
To:
[email protected]
Subject: Re: [FW-1] CPU
utilization on IPSO (throughput issues).
Yeah,
our firewall is a 450 Mhz Pentium II. What are new IP650s shipping with?
-----Original
Message-----
From: Mellor, Derin
[mailto:[email protected]]
Sent: Tuesday, December 17, 2002
2:26 AM
To:
[email protected]
Subject: Re: [FW-1] CPU
utilization on IPSO (throughput issues).
What
processor does your IP650 have?
Older
versions have Pentium III 450M, I have seen sites where these would max out at
about 50M straight stateful when using short packets.
Derin
-----Original
Message-----
From: Shawn Behrens
[mailto:[email protected]]
Sent: Mon 16/12/2002 21:39
To:
[email protected]
Cc:
Subject: Re: [FW-1] CPU
utilization on IPSO (throughput issues).
Aaron,
what's a ps -ef give you? That way you can see which process eats your CPU.
My first thought would be that isakmpd is eating all your CPU time; it is
kinda fond of that since SP6.
Shawn
> -----Original Message-----
> From: <Aaron Reynolds> [mailto:[email protected]]
> Sent: Monday, December 16, 2002 4:15 PM
> To: [email protected]
> Subject: [FW-1] CPU utilization on IPSO (throughput issues).
>
>
> I have an IP650 running as the primary in a two node HA
> cluster. It is
> running IPSO 3.5 FCS8 and 4.1 SP6. I was running vmstat this
> morning, and
> was noticing a sustained high CPU utilization, roughly
> 70-90%. After a
> while I simultaneously ran "netstat -i" to get some
> throughput stats. I
> noticed that our firewall was running anywhere from 20-35
> Mbits throughput,
> when it was at 70-90% utilized. When the throughput dropped
> to 4-10 Mbits,
> the utilization would drop to 10-15%. The specs on an IP650
> say 200+ Mbps.
> "ps -aux" shows processes consuming about 10-15% cpu. I do
> have about 150
> concurrent SecuRemote users, but how can I tell what it is
> that is consuming
> the CPU. During the analysis the firewall connection table
> was at about
> 3000. Thanks for any input.
>
> -Aaron
>
> =================================================
> To set vacation, Out Of Office, or away messages,
> send an email to [email protected]
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> [email protected]
> =================================================
>
>
>
>
Please note that:
1. This e-mail may constitute privileged information. If you are not the
intended recipient, you have received this confidential email and any
attachments transmitted with it in error and you must not disclose, copy,
circulate or in any other way use or rely on this information.
2. E-mails to and from the company are monitored for operational reasons and in
accordance with lawful business practices.
3. The contents of this email are those of the individual and do not
necessarily represent the views of the company.
4. The company does not conclude contracts by email and all negotiations are
subject to contract.
5. The company accepts no responsibility once an e-mail and any attachments is
sent.
http://www.activis.com
This annotation was added by the e-scan service.
http://www.activis.com
----------------------------------------------------------------------------------
This message has been checked for all known viruses by e:)scan.
For further information please contact [email protected]
=================================================
To set vacation, Out Of Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================
**********************************************************************
This email
and any files transmitted with it are confidential and
intended
solely for the use of the individual or entity to whom they
are
addressed. If you have received this email in error please notify
the
sender immediately and then delete from your system.
This
footnote also confirms that this email message has been swept
for the
presence of known computer viruses.
**********************************************************************