What you may be seeing is NG’s dynamic memory usage… Your numbers seem to
be in line with what I have seen…
-----Original Message-----
From: Read, Andrew
[mailto:[email protected]]
Sent: Tuesday, February 18, 2003
7:50 PM
To:
[email protected]
Subject: Re: [FW-1] SecurePlatform
memory
I've now got my
SecurePlatform FP3 box in production.
I also appear to have a
memory leak on this box.
Here are the stats from
Smartview Status
Date Active Real Memory
17/01/2003 240932
18/01/2003 264996
19/01/2003 274116 Weekend -less activity on weekend here also
20/01/2003 275040
21/01/2003 303580
22/01/2003 312184
I agree with you that
traffic is involved, I also think that the logging of the traffic causes the
memory to be "used up" more quickly. I noticed a much fast loss of
memory when I put account tracking on two high use rules.
Someone suggested I
install HF1, which I have done. My current free memory (from 512MB physical) is
just over 4 meg. I'm not sure if secure platform is just caching as much as it
can close to this limit, or whether the memory leak is still present. I guess
I'll know in a few more days.
I am running Mgmt and
Enforcement module on the same box.
-----Original Message-----
From: Damien Hart
[mailto:[email protected]]
Sent: Wednesday, 19 February 2003
12:30 p.m.
To:
[email protected]
Subject: [FW-1] SecurePlatform
memory
I have been away for a few weeks so
if someone has answered this previously please let me know.
I started monitoring my
Secureplatform NG FP3 firewall with MRTG in December last year and it has
become very apparent to me that there is a serious memory leak in it. Two
of the OID's I am monitoring are 1.3.6.1.4.1.2620.1.6.7.1.3.0 and
1.3.6.1.4.1.2620.1.6.7.1.5.0 which are amount of free memory total and amount
of free memory available. The server has 512 MB RAM and I notice
that it declines at a rate that brings it down to less than 10 Meg free after
about four weeks. It does however drop less on weekends than on weekdays
so it is presumably usage related.
ps aux doesn't show any significant
differences in the RSS field (which I believe is real memory used) when it has
10 Meg free than when it has 250 meg free so I am a bit mystified.
I know other people out there are
monitoring their firewalls with MRTG because I have seen messages pertaining to
it before, but has anyone else noticed this memory leak?