> has anyone ever had a FP4 enforcement point running on Solaris 8 > which repeatedly moves into a state where it occupies 100% CPU time?
Not as such, but a few things that come to mind are: - Is this a hardened machine? If so, have you changed it back so syslogd allows remote connections again? - Is this a "core install" or an install including GUI? - How about memory utilization? Maybe swap is being heavily utilized? - Are you using security servers? Check the plethora of settings for those, starting with file descriptors. And this: 14. 404-14. Resolved FWD from reaching 100% CPU and hangs when logging Microsoft DCE-RPC connections. Install on SmartCenter Server Going to HFA-404 on SmartCenter Server and Module is certainly worth a shot. > Interestingly top doesn't show any process occupying the CPU, all > processes are around 1-2%. That means CPU is being eaten in kernel space. Shawn Please note that: 1. This e-mail may constitute privileged information. If you are not the intended recipient, you have received this confidential email and any attachments transmitted with it in error and you must not disclose, copy, circulate or in any other way use or rely on this information. 2. E-mails to and from the company are monitored for operational reasons and in accordance with lawful business practices. 3. The contents of this email are those of the individual and do not necessarily represent the views of the company. 4. The company does not conclude contracts by email and all negotiations are subject to contract. 5. The company accepts no responsibility once an e-mail and any attachments is sent. http://www.integralis.com ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
