I have a bering ulibc firewall running shorwall and ipsec.

It's badly leaking memory.
see:
https://development.coopmetrics.coop/munin/mcgruff/mcgruff.html

you can see that it leaks pretty hard during the nightly backups.

i have to reboot every few days or the machine runs out of ram and
becomes unstable.

The bad news is that this machine is in production, and i can't take it
down any time soon.  

I'm pretty sure that it's ipsec related because i don't lose memory when
doing a big scp transfer NOT via the vpn.

Removing the ipsec modules does not free up the ram.

Any ideas?
Anybody seen this problem before?

brad

memory info below:




mcgruff# uname -a
Linux mcgruff 2.4.33 #1 Mon Sep 4 15:52:08 CEST 2006 i686 unknown

mcgruff# ps aux
  PID  Uid     VmSize Stat Command
    1 root        244 S   init [2]   
    2 root            SW  [keventd]
    3 root            SWN [ksoftirqd_CPU0]
    4 root            SW  [kswapd]
    5 root            SW  [bdflush]
    6 root            SW  [kupdated]
20110 root        268 S   /sbin/syslogd -m 240 
 9531 root        332 S   /sbin/klogd 
19053 root            SW  [khubd]
23869 root        244 S   /sbin/dhcpcd-bin -Y -N -R -d eth0 
16786 root        136 S   /usr/sbin/watchdog 
14975 root        232 S   /usr/sbin/inetd 
  914 root        272 S   /usr/sbin/ulogd -d 
 8127 root        956 S   /usr/sbin/sshd 
11645 root        420 S   /usr/sbin/ntpd -g 
10743 dnscache   1224 S   /usr/bin/dnscache 
 2076 root        288 S   /usr/bin/ez-ipupdate -c /etc/ez-ipupd.conf
-F /var/run/ez-ipupd.pid 
 1016 root        308 S   /usr/sbin/cron 
  254 root      13376 S   /usr/sbin/snmpd -Lsd -Lf /dev/null
-p /var/run/snmpd.pid 
16747 root        288 S   /sbin/getty 38400 tty1 
29709 root        288 S   /sbin/getty 38400 tty2 
31535 root        420 S   /usr/sbin/ntpd -g 
18574 root       1216 S   /usr/sbin/sshd: [EMAIL PROTECTED]
 5204 root        404 S   -sh 
22527 root        340 S   /bin/sh /usr/lib/ipsec/_plutorun --debug
--uniqueids yes --nocrsend  --strictcrlpolicy  --nat_trave
25116 root        296 S   logger -s -p daemon.error -t ipsec__plutorun 
30277 root        344 S   /bin/sh /usr/lib/ipsec/_plutorun --debug
--uniqueids yes --nocrsend  --strictcrlpolicy  --nat_trave
27023 root        340 S   /bin/sh /usr/lib/ipsec/_plutoload --wait no
--post  
32018 root        844 S   /usr/lib/ipsec/pluto --nofork
--secretsfile /etc/ipsec.secrets --ipsecdir /etc/ipsec.d --use-auto --
 2607 root        476 S N pluto helper  #  0
-nofork                                                                       
 6092 root        132 S   _pluto_adns 
 1810 root        284 R   ps aux 
mcgruff# free
              total         used         free       shared      buffers
  Mem:       119664       103964        15700            0           56
 Swap:            0            0            0
Total:       119664       103964        15700

mcgruff# cat /proc/meminfo
        total:    used:    free:  shared: buffers:  cached:
Mem:  122535936 106496000 16039936        0    57344 14569472
Swap:        0        0        0
MemTotal:       119664 kB
MemFree:         15664 kB
MemShared:           0 kB
Buffers:            56 kB
Cached:          14228 kB
SwapCached:          0 kB
Active:           9680 kB
Inactive:         4660 kB
HighTotal:           0 kB
HighFree:            0 kB
LowTotal:       119664 kB
LowFree:         15664 kB
SwapTotal:           0 kB
SwapFree:            0 kB



-------------------------------------------------------------------------
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and take
control of your XML. No limits. Just data. Click to get it now.
http://sourceforge.net/powerbar/db2/
------------------------------------------------------------------------
leaf-user mailing list: leaf-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/

Reply via email to