Hi, happy new year! :-)
On Wed, Dec 31, 2003 at 02:40:31PM +0100, Michael Schwartzkopff wrote:
>
> If you find the solution please mail me. Thanks.
Yup, the reason was found yesterday.
Symptoms (Seen on Solaris 9 / SunFire V240 / FP4):
- CPU usage almost always around 100%,
but not userspace process consuming it
(-> problem in Kernel)
- All userspace (=nonkernel) activity becomes
extremely slow or unavailable
(Impossible to push a new policy due to timeout,
difficult to login, a simple ls takes several
minutes, cpstop around 20-30 minutes)
- Kernel processes still seem to work, slower but
still acceptable -> machine is able to perform
normal firewall tasks.
Reason:
The customer had accidentally checked a button
box: In the AI menu, fingerprinting submenu there
is a button which allows to increase the TTL of all
IP packets. This was checked. Disabling this feature
made everything work normally again.
regards
Hadmut
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================
