PDA

View Full Version : Policy installation error /Load on memory fail



vbavbalist
2012-08-27, 02:15
Hi,

From yesterday i started to get error load on memory error and cant install policy on R70 SPLAT. My search brings me the idea to check for the non-English characters in comments etc but i couldnt found out anyone with
my eye . Any suggestion to find out and fix the issue? (urgent need)

Regards

Eros_G
2012-08-27, 12:24
Hi,

From yesterday i started to get error load on memory error and cant install policy on R70 SPLAT. My search brings me the idea to check for the non-English characters in comments etc but i couldnt found out anyone with
my eye . Any suggestion to find out and fix the issue? (urgent need)

Regards


it it is memory allocation error on policy load, you may want to search for /boot/grub/grub.conf , backup file, you may want to increase vmalloc=512....save change, reboot on your gateway and apply policy again

vbavbalist
2012-09-03, 03:44
Hi,

thank you but what does this vmalloc mean , what is it used for and what effects it have and how does rising will affect the policy installation;?


Regards

serlud
2012-09-03, 14:53
thank you but what does this vmalloc mean , what is it used for and what effects it have and how does rising will affect the policy installation;?


More information about this virtual allocation mechanism can be found in *google*
example Vmalloc - http://www.makelinux.net/ldd3/chp-8-sect-4 (http://www.makelinux.net/ldd3/chp-8-sect-4http://)

Due to CP bad programming skills fast all current version (R70/R76) of firewall have this memory problem. (even of just normal firewall without IPS)

to check you current usage of vmalloc use following command:
cat /proc/meminfo | grep vmall*

VmallocTotal: 249848 kB
VmallocUsed: 146460 kB
VmallocChunk: 2736 kB

if you Total is = Used you have to reboot you gateway (it aslo clean this memory usage ) or increase it in grub.conf (and also reboot).

You also should see following errors in :

[Expert@fw-test]# more /var/log/messages
Nov 21 10:14:50 fw-test kernel: allocation failed: out of vmalloc space - use vmalloc=<size> to increase size.
Nov 21 10:14:50 fw-test kernel: [fw_2];FW-1: fwdynlog_prepare: fw_kmalloc_ex(7159376) failed
Nov 21 10:14:50 fw-test kernel: [fw_2];FW-1: Warning: atomic loading failed during policy replacement (preparation stage)

You can aslo search in CPUG for more information about this new CP * function*.