Hi,
We are experiencing some problems with our firewall, it's rebooting on it's
own.
It's a SUN 3500 box with Solaris 7 and FW-1 4.1 SP1.
The output of the 'fw ctl pstat' command just before the rebooting was:
Hash kernel memory (hmem) statistics:
Total memory allocated: 9094728 bytes in 2219 4KB blocks using 1 pool
Total memory bytes used: 4436936 unused: 4657792 (51%) peak:
5734144
Total memory blocks used: 1356 unused: 863 (38%)
Allocations: 433388087 alloc, 0 failed alloc, 433321968 free
System kernel memory (kmem) statistics:
System physical memory: 756596736 bytes
Available physical memory: 182747136 bytes
Total memory bytes used: 10806498 peak: 16366686
Allocations: 9725969 alloc, 0 failed alloc, 9725342 free, 0 failed free
Inspct: 619411159 packets, -385784926 operations, 1562031382 lookups,
262599892 record, -197
9826106 extract
Cookies: -1763686142 total, 0 alloc, 0 free, 32892 dup, -768728887 get,
61737044 put, 619487
563 len, 0 chain alloc, 0 chain free
Fragments: 162312 fragments, 57560 expired, 49643 packets
Encryption: 0 encryption, 0 decryption, 0 short, 0 failures
Translation: 30883691/-900709491 forw, 31099925/-863091797 bckw, 61262867
tcpudp, 720749 icm
p, 2604714-3091374 alloc
And the output of the 'fw tab -t connections -s' command was:
HOST NAME ID #VALS
localhost connections 19 58033
So, we have:
756596736 bytes of total available physical memory and only 10806498 total
memory bytes used. On the other hand, the memory available for the firewall
is 9094728 bytes and only 51% was being used.
In the /var/adm/messages we have the following error:
May 28 13:27:18 XXXX unix: panic[cpu18]/thread=40235e60:
May 28 13:27:18 XXXX unix: FW-1: out of stacks
and then it reboots.
Could it be that we are having memory problems? The maximum of connections
is set to 75000, so I think that's not the problem.
Any help will be appreciated, this firewall is very critical to the
organization.
Thanks in advance,
Maria Elinger
Pert Consultores SRL
================================================================================
To unsubscribe from this mailing list, please see the instructions at
http://www.checkpoint.com/services/mailing.html
================================================================================
