Firewall-1

Re: [FW-1] FP4/Solaris: 100% CPU Occupation?

Subject: Re: [FW-1] FP4/Solaris: 100% CPU Occupation?
From: Shawn Behrens <Shawn.Behrens AT INTEGRALIS DOT COM>
To: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
Date: Tue, 30 Dec 2003 13:32:05 -0500
> has anyone ever had a FP4 enforcement point running on Solaris 8
> which repeatedly moves into a state where it occupies 100% CPU time?

Not as such, but a few things that come to mind are:

- Is this a hardened machine? If so, have you changed it back so syslogd
allows remote connections again?
- Is this a "core install" or an install including GUI?
- How about memory utilization? Maybe swap is being heavily utilized?
- Are you using security servers? Check the plethora of settings for those,
starting with file descriptors.

And this:
  14. 404-14. Resolved FWD from reaching 100% CPU and hangs when logging
Microsoft DCE-RPC connections. Install on SmartCenter Server

Going to HFA-404 on SmartCenter Server and Module is certainly worth a shot.

> Interestingly top doesn't show any process occupying the CPU, all
> processes are around 1-2%.

That means CPU is being eaten in kernel space.

Shawn


Please note that:

1. This e-mail may constitute privileged information. If you are not the 
intended recipient, you have received this confidential email and any 
attachments transmitted with it in error and you must not disclose, copy, 
circulate or in any other way use or rely on this information.
2. E-mails to and from the company are monitored for operational reasons and in 
accordance with lawful business practices.
3. The contents of this email are those of the individual and do not 
necessarily represent the views of the company.
4. The company does not conclude contracts by email and all negotiations are 
subject to contract.
5. The company accepts no responsibility once an e-mail and any attachments is 
sent.

http://www.integralis.com

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================

<Prev in Thread] Current Thread [Next in Thread>