Nokia IP350 @100%

[pat13b]

Hello,

I have been pulling my hair trying to figure out why one of the Nokia's IP350's I have in my lab kept going to 100% CPU utilization.

I comapred my configs, swapped memory, swapped CPUs. Everything I looked at was the same as the other one I have running. The good one runs at less than 5%.

I removed the cluster setup thinking it was something to do with that.
Still went to 100%.

My final fix, was to reload EVERYTHING. I went through an install starting with IPSO.

Just thought I would share my results.

IP350 PIII 512K RAM
IPSO 4.2 HFA 02
NGX65 HFA 02

-pat13b

[msjouw]

Just a FYI:
We have been experiencing the most weird behavior on IPSO 4.2:
I have been locked out completely even from the console while the traffic was still forwarded. (on a IP530)
I have unexplainable crashes on a IP350 and IP260 (once a month to once a day) sent Crashdumps to Nokia, even send the complete box back, no response yet, same type hardware running 4.1 now and running like a charm with the exact same policy
R62 on all the 350 and the 260, however we had the lockout on a R62 350 as well. The 530 was running R65 and was fine when we moved back to IPSO 41

Nokia is still not confirming anythging we have seen so far.

The only platform I have running stable on IPSO 4.2 is a IP290 as it does not even support 4.1 anymore.

Regards, Maarten.

[Dominik Zanolari]

regarding IPSO 4.2: I experienced stability issues as well on builds higher than 041. Build041 however, works very stable.

what does a "ps -aux" report? which process is taking all the CPU time?

[th0i3]

msjouw: You could be running into a bug with Checkpoint RTM (Real Time Monitor). There is a hotfix from Nokia which you need to request Nokia/Reseller to provide.

To determine this, you need to disable SmartView Monitor from the gateway property object to see if this stabilse your environment.

This bug only affects R62.

[edit] : I forgot to mention, please upgrade to the latest IPSO build of 4.2 088 which was released in July 08.

[msjouw]

th0i3, this is what we did and we don't run the Smartview Monitor, we returned a IP260 box to Nokia (RMA) that kept on crashing every 2-3 days at first and later evry 3-4 hours.
Regards, Maarten.

[th0i3]

I like their document/support/ISPO OS. However, they have some serious problems with their manufacturing. Let me quote especially their "IP2250" and ADP + encryption cards.