Hello,

I have this customer that has a pair of fw modules running R60HF04 over
Solaris and working as active/standby cluster.

Recently they were troubleshooting some connectivity issues with a remote
site, and decided to check the CPU usage on the active fw module, so they
used the vmstat command, which started giving a regular output, but suddenly
some unusual messages came out. Check them out:

:/#vmstat 2
kthr      memory            page            disk          faults      cpu
r b w   swap  free  re  mf pi po fr de sr m1 m1 m1 m2   in   sy   cs us sy
id
0 0 0 1720288 180936 18 92  0  0  0  0  0  0  0  0  0  131   49  117  1  7
92
0 0 0 1696888 158528 0   8  0  0  0  0  0  0  0  0  0  736  747  133  0 13
87
.
.
kthr      memory            page            disk          faults      cpu
r b w   swap  free  re  mf pi po fr de sr m1 m1 m1 m2   in   sy   cs us sy
id
0 0 0 1696888 158520 0   0  0  0  0  0  0  0  0  0  0  780  765  141  0  6
94
1 0 0 1696888 158520 0   0  0  0  0  0  0  0  0  0  0  768  836  120  0  8
91
0 0 0 1696888 158520 0   1  0  0  0  0  0  0  0  0  0  632  940  209  0  6
94
0 0 0 1696888 158520 0   0  0  0  0  0  0  0  0  0  0  747  683  115  0 10
90
0 0 0 1696888 158520 0   0  0  0  0  0  0  0  0  0  0  723  759  112  0  7
93
0 0 0 1696888 158520 0   0  0  0  0  0  0  0  0  0  0  578  749  123  1  5
94
<<State change>>
kthr      memory            page            disk          faults      cpu
r b w   swap  free  re  mf pi po fr de sr m1 m1 m1 m2   in   sy   cs us sy
id
0 0 0 1720288 180936 18 92  0  0  0  0  0  0  0  0  0  131   49  117  1  7
92
0 0 0 1695488 157264 0   0  0  0  0  0  0  0  0  0  0  553  652  114  0  4
96
0 0 0 1695488 157264 0   0  0  0  0  0  0  0  0  0  0  667  604  111  0 10
90
<<State change>>
kthr      memory            page            disk          faults      cpu
r b w   swap  free  re  mf pi po fr de sr m1 m1 m1 m2   in   sy   cs us sy
id
0 0 0 1720288 180936 18 92  0  0  0  0  0  0  0  0  0  131   49  117  1  7
92
0 0 0 1695416 157192 0   1  0  0  0  0  0  0  0  0  0  603  667  106  0  8
92
<<State change>>
kthr      memory            page            disk          faults      cpu
r b w   swap  free  re  mf pi po fr de sr m1 m1 m1 m2   in   sy   cs us sy
id
0 0 0 1720288 180936 18 92  0  0  0  0  0  0  0  0  0  131   49  117  1  7
92
0 0 0 1695416 157184 0   0  0  0  0  0  0  0  0  0  0  773  833  133  0  9
91
0 0 0 1695416 157184 0   0  0  0  0  0  0  0  0  0  0  977  846  168  1 19
80
<<State change>>
kthr      memory            page            disk          faults      cpu
r b w   swap  free  re  mf pi po fr de sr m1 m1 m1 m2   in   sy   cs us sy
id
0 0 0 1720288 180936 18 92  0  0  0  0  0  0  0  0  0  131   49  117  1  7
92
0 0 0 1695416 157184 0   0  0  0  0  0  0  0  0  0  0  877  677  130  0  7
92
<<State change>>
kthr      memory            page            disk          faults      cpu
r b w   swap  free  re  mf pi po fr de sr m1 m1 m1 m2   in   sy   cs us sy
id
0 0 0 1720288 180936 18 92  0  0  0  0  0  0  0  0  0  131   49  117  1  7
92
0 0 0 1696824 158472 0   2  0  0  0  0  0  0  0  0  0  699  838  206  0 15
85
0 0 0 1696760 158408 97 368 0  0  0  0  0  0  0  0  0  747 1581  171  3 16
81

My customer thought those messages meant the active module was changing its
cluster state from active to standby, back and forward, but I went there and
after doing some filtering on the Check Point logs, proved to him those
boxes had never switched HA states.

Unfortunately I have no idea what those messages mean and apparently Secure
Knowledge is down, anyway I feel like most likely this is something Solaris
related, not Check Point's.

Most of my Check Point experience is on SPLAT deployments so I'm wondering
if any of you guys with more Check Point-over-Solaris knowledge might help
me with this one, as my customer now wants to know what is going on with
that box.

Regards

--
Sergio Alvarez
(506)8301342

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================

Reply via email to