Re: [FW-1] SecurePlatform memory

[Damien Hart <damien.hart@FW1-NOSPAMCANBERRATIMES.COM.AU>]

Its funny you mention that because a couple of weeks ago I noticed mine,
which is a single gateway product, dropped 100 meg in a couple of minutes
for no apparent reason.

But based on what you guys have told me I might let it use all the memory
and see what happens.  Normally I have rebooted it when it was getting
uncomfortably low, say around 10 Meg free.  I also noticed that a
cpstop/cpstart had very little effect on the memory usage.

If it claps out, I shall do as Andrew suggested and go for HF1.  I can't
recall why it was I was reticent to use it, but it based on problems people
on this list had...  a few weeks of leave and work just seems so unimportant
:-)

thanks all,

Damo




> I think can tell you what will happen. I've been watching this on our
> firewall for a while. We're running SecurePlatform FP3 HF1 on two boxes
> with ClusterXL in HA mode.  The boxes each have 1 Gig of memory and one
> of them used it all last week and it stopped responding and ClusterXL
> failed over to the other box. It wasn't dead, I could still ssh to it
> and it had 0 free memory.  As I recall, some virtual memory was in use
> but it had not used it all.
>
> The memory consumption only seems to occur on the active module.
> Cpstop/cpstart does not free up any memory, the box must be re-booted.
> After the re-boot it was using around 240 Meg.  Right now, 5 days after
> it was re-booted, active real memory is 253 Meg.  Just before it stopped
> its memory usage had grown to a little over 600 Meg.  I haven't been
> able to determine why, but it consumed 400 Meg very suddenly.  At one
> point the memory use was growing 10-15 meg a day during the week (little
> or none on the weekends).  We are running SmartView Monitor and due to
> another issue, Checkpoint had me shut off the traffic history reports
> and the growth dropped to around 2-5 meg a day.
>
> Mike
>
>
>
> >>> andrew.read@NZ.TELETECH.COM 02/19/03 11:51AM >>>
>
> Hi Damo,
>
> I've just checked my free memory this morning, and it's risen a bit
> (just
> over 5 meg). So no virtual memory in use yet. Looks like it might be
> holding
> steady, before I applied the hotfix, virtual memory was starting to be
> used.
>
> I'll be keeping a close eye on this over the next week or so.
>
> I haven't had any problems with HF1 yet, though I run a pretty
> straightforward set-up.
>
> Andrew
>
> -----Original Message-----
> From: Damien Hart [mailto:damien.hart@CANBERRATIMES.COM.AU]
> Sent: Wednesday, 19 February 2003 5:08 p.m.
> To: FW-1-MAILINGLIST@beethoven.us.checkpoint.com
> Subject: Re: [FW-1] SecurePlatform memory
>
>
> Hi Andrew and thanks for the quick response.
>
> I use a couple of high use accounting rules too so it sounds like we
> have a
> similar problem.  I haven't been game yet to see what happens when the
> memory runs out.  I am curious to know whether it just starts using
> virtual
> memory, if it grinds to a crashing halt, or if as you suggested it just
> uses
> all available memory for caching stuff.
>
> I haven't tried HF1 yet as I understood there were some issues with
> it.
>
> regards
>
> Damo
>
>
>
> ************************************************************
> The information contained in this email is confidential and
> may be legally privileged. If the reader of this message is
> not the intended recipient you are hereby notified that any
> use, dissemination, distribution, or reproduction of this
> message is prohibited. If you have received this message in
> error please notify the sender and delete all copies of this
> message including any attachments it may contain.
> The email or its content does not necessarily represent the
> views of the company.
> ************************************************************
>
> =================================================
> To set vacation, Out Of Office, or away messages,
> send an email to LISTSERV@lists.us.checkpoint.com
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> fw-1-owner@ts.checkpoint.com
> =================================================
>
>

=================================================
To set vacation, Out Of Office, or away messages,
send an email to LISTSERV@lists.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner@ts.checkpoint.com
=================================================