CPUG

The Check Point User Group

A Resource For The Check Point Community.  Fast.  Useful.  Independent.

1. CCSA/CCSE One-Week Dual-Certification Training Course with CPUG in San Francisco!
    Courses Starting 12/8, (2009) 1/19, 2/9, 3/9, 4/6, 5/4, 6/8, 7/6, 8/3.
2. Join Us On LinkedIn - We now have a CPUG group.


Go Back   CPUG: The Check Point User Group > Check Point Firewall-1/VPN-1 Platforms > Check Point SecurePlatform (SPLAT)
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 2007-03-10
Member
 
Join Date: 2007-02-17
Posts: 54
Rep Power: 2
ppawlo has an average reputation (10+)
Default Out of memory;

Hi All, I have a problem with my Firewall.
After reboot FW used about 300Mb. Then everything work good.

But always after few weeks the Firewall use 2’000MB. Then the politics installed very long.
This morning the Firewall stopped work. I could not connect to it. Clear traffic has been gone by FW, but VPN did not works.

In my logs I sow something like that;
----------------|
Mar 10 02:25:40 Firewall kernel: Out of Memory: Killed process 664 (fw).
Mar 10 02:25:40 Firewall kernel: Out of Memory: Killed process 665 (fw).
Mar 10 02:25:41 Firewall modprobe: modprobe: Can't locate module n
Mar 10 02:26:43 Firewall kernel: Mem-info:
Mar 10 02:26:43 Firewall kernel: Zone:DMA freepages: 2854 min: 0 low: 0 high: 0
Mar 10 02:26:43 Firewall kernel: Zone:Normal freepages: 1204 min: 1278 low: 8639 high: 12447
Mar 10 02:26:43 Firewall kernel: Zone:HighMem freepages: 3472 min: 255 low: 510 high: 765
Mar 10 02:26:43 Firewall kernel: Free pages: 7530 ( 3472 HighMem)
Mar 10 02:26:43 Firewall kernel: ( Active: 18111/4195, inactive_laundry: 631, inactive_clean: 626, free: 7530 )
Mar 10 02:26:43 Firewall kernel: aa:0 ac:0 id:0 il:0 ic:0 fr:2854
Mar 10 02:26:43 Firewall kernel: aa:0 ac:134 id:108 il:31 ic:0 fr:1204
Mar 10 02:26:43 Firewall kernel: aa:14794 ac:3183 id:4078 il:610 ic:626 fr:3472
Mar 10 02:26:43 Firewall kernel: 0*4kB 1*8kB 3*16kB 3*32kB 4*64kB 0*128kB 1*256kB 1*512kB 0*1024kB 1*2048kB 2*4096kB = 11416kB)
Mar 10 02:26:43 Firewall kernel: 24*4kB 14*8kB 18*16kB 7*32kB 4*64kB 2*128kB 4*256kB 1*512kB 0*1024kB 1*2048kB 0*4096kB = 4816kB)
Mar 10 02:26:43 Firewall kernel: 494*4kB 401*8kB 404*16kB 38*32kB 2*64kB 1*128kB 1*256kB 1*512kB 0*1024kB 0*2048kB 0*4096kB = 13888kB)
Mar 10 02:26:43 Firewall kernel: Swap cache: add 4583295, delete 4576002, find 2640075/3861444, race 0+48
Mar 10 02:26:43 Firewall kernel: 454853 pages of slabcache
Mar 10 02:26:43 Firewall kernel: 126 pages of kernel stacks
Mar 10 02:26:43 Firewall kernel: 0 lowmem pagetables, 406 highmem pagetables
Mar 10 02:26:43 Firewall kernel: Free swap: 4136808kB
Mar 10 02:26:43 Firewall kernel: 524236 pages of RAM
Mar 10 02:26:43 Firewall kernel: 32716 pages of HIGHMEM
Mar 10 02:26:43 Firewall kernel: 10464 reserved pages
Mar 10 02:26:43 Firewall kernel: 11208 pages shared
Mar 10 02:26:43 Firewall kernel: 7293 pages swap cached
Mar 10 02:26:43 Firewall kernel: Out of Memory: Killed process 955 (fw).
Mar 10 02:26:43 Firewall kernel: Out of Memory: Killed process 957 (fw).
------------------|

FW has 2GB Phisical Memory and 6GB Swap. So I do not know why the problems occurred.
FW is NGX R6.0 with HFA 04.
SmartCenter is installed on other machine.

Do you know why the problems occurred? When it was FW used about 2,000 MB of memory. Now after hardware restart everything is correct. FW again use 300MB memory.

P.S. Sorry for my English ;-).
Regards
Pawel

Last edited by ppawlo; 2007-03-10 at 04:17.
Reply With Quote
  #2 (permalink)  
Old 2008-08-08
Junior Member
 
Join Date: 2008-07-31
Posts: 2
Rep Power: 0
Abraham_S has an average reputation (10+)
Default Re: Out of memory;

Hello.

I have the same problem and in the SecureKnowledge in the sk33219 exist reference but don't resolve the problem.

Regards.

Abraham_S
Reply With Quote
  #3 (permalink)  
Old 2008-08-18
Junior Member
 
Join Date: 2006-03-13
Posts: 5
Rep Power: 0
bernardpasche has an average reputation (10+)
Default Re: Out of memory;

how many rules do you have in your policy?
Reply With Quote
  #4 (permalink)  
Old 2008-08-19
Junior Member
 
Join Date: 2008-07-31
Posts: 2
Rep Power: 0
Abraham_S has an average reputation (10+)
Default Re: Out of memory;

Hello.

I have 36 rule's in my Firewall, i will install SPLAT 2.6 version and i send my results.


Regards.!
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


All times are GMT -7. The time now is 07:28.


Powered by vBulletin® Version 3.7.4
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.2.0