Re: [FW-1] SecurePlatform memory

[Mike Mead <mmead@FW1-NOSPAMADM.STATE.ID.US>]

I think can tell you what will happen. I've been watching this on our
firewall for a while. We're running SecurePlatform FP3 HF1 on two boxes
with ClusterXL in HA mode.  The boxes each have 1 Gig of memory and one
of them used it all last week and it stopped responding and ClusterXL
failed over to the other box. It wasn't dead, I could still ssh to it
and it had 0 free memory.  As I recall, some virtual memory was in use
but it had not used it all.

The memory consumption only seems to occur on the active module.
Cpstop/cpstart does not free up any memory, the box must be re-booted.
After the re-boot it was using around 240 Meg.  Right now, 5 days after
it was re-booted, active real memory is 253 Meg.  Just before it stopped
its memory usage had grown to a little over 600 Meg.  I haven't been
able to determine why, but it consumed 400 Meg very suddenly.  At one
point the memory use was growing 10-15 meg a day during the week (little
or none on the weekends).  We are running SmartView Monitor and due to
another issue, Checkpoint had me shut off the traffic history reports
and the growth dropped to around 2-5 meg a day.

Mike



>>> andrew.read@NZ.TELETECH.COM 02/19/03 11:51AM >>>

Hi Damo,

I've just checked my free memory this morning, and it's risen a bit
(just
over 5 meg). So no virtual memory in use yet. Looks like it might be
holding
steady, before I applied the hotfix, virtual memory was starting to be
used.

I'll be keeping a close eye on this over the next week or so.

I haven't had any problems with HF1 yet, though I run a pretty
straightforward set-up.

Andrew

-----Original Message-----
From: Damien Hart [mailto:damien.hart@CANBERRATIMES.COM.AU]
Sent: Wednesday, 19 February 2003 5:08 p.m.
To: FW-1-MAILINGLIST@beethoven.us.checkpoint.com
Subject: Re: [FW-1] SecurePlatform memory


Hi Andrew and thanks for the quick response.

I use a couple of high use accounting rules too so it sounds like we
have a
similar problem.  I haven't been game yet to see what happens when the
memory runs out.  I am curious to know whether it just starts using
virtual
memory, if it grinds to a crashing halt, or if as you suggested it just
uses
all available memory for caching stuff.

I haven't tried HF1 yet as I understood there were some issues with
it.

regards

Damo



************************************************************
The information contained in this email is confidential and
may be legally privileged. If the reader of this message is
not the intended recipient you are hereby notified that any
use, dissemination, distribution, or reproduction of this
message is prohibited. If you have received this message in
error please notify the sender and delete all copies of this
message including any attachments it may contain.
The email or its content does not necessarily represent the
views of the company.
************************************************************

=================================================
To set vacation, Out Of Office, or away messages,
send an email to LISTSERV@lists.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner@ts.checkpoint.com
=================================================