Firewall-1

Re: [FW-1] NGX Virtual Memory Issue

Subject: Re: [FW-1] NGX Virtual Memory Issue
From: Andrey Maluck <andreym AT PRONET DOT UA>
To: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
Date: Wed, 27 Jul 2005 15:36:51 +0300
Does anyone tried setting those parameters fog SPLAT NGX ?

Josef Mruzek wrote:

Hi Andrey,
I has similar problem on SPLAT R55 as you and I fixed with following solution.
Best regard,
Josef Mruzek

== sk18289==
Solution
For NG FP3, as a workaround, the machine can be configured to boot with 512MB RAM. The issue is solved in FP3 HF2 HFA 324 and FireWall-1 NG with Application Intelligence, but is 'off' by default because of risk management considerations. To get large amounts of memory on Linux machines with 1GB memory or more, do the following actions: Create a file named fwkern.conf in $FWDIR/boot/modules/ (it may already exist - if so, keep the current contents and just add the new lines below).
Add the following two lines to the file:
fw_smem_use_alternate_malloc=1
fw_hmem_use_alternate_malloc=1
Then reboot the machine.
==sk18289==

Andrey Maluck napsal(a):

Hi, all.
I encounter strange problem with NGX SPLAT. From time to time it just hangs up and only cold restart helps. Smart View Monitor reports virtual memory usage right after restart at about 600 MB and then in a couple of days it grows up to 985 MB. As I can see from System History report in SV Monitor FW hangs up when virtual memory usage reaches the higher mark But another starnge thing is that while SV monitor shows high VM usage, vmstat reports ZERO usage!!!!

procs memory swap io system cpu r b swpd free buff cache si so bi bo in cs us sy wa id 0 0 0 297572 49052 387048 0 0 26 23 121 46 1 0 1 98

How can that be ? Any thougts about what can cause such behaviour ?

Thanks,
Andrey.


...

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================


=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================

<Prev in Thread] Current Thread [Next in Thread>