What else are You running on the system? Naturally, it looks like Your system is thrashing, but if You say You've tested the same thing with 40MB of RAM and it worked fine, it's a little hard to believe that thrashing is the problem, or at least that FW-1 is causing the thrashing. Are You running X? If so, i would start by turning that off. It's a memory hog.
-&
> -----Urspr�ngliche Nachricht-----
> Von: Markus Hofbauer [mailto:[EMAIL PROTECTED]]
> Gesendet am: Freitag, 15. Februar 2002 09:27
> An: [EMAIL PROTECTED]
> Betreff: Re: [FW-1] AW: [FW-1] NG FP1 on Red Hat Linux 7.2
>
> hi,
>
> here is another kernel problem in a testing environment:
>
> fw-1 ng fp1 on redhat 7.2; kernel 2.4.9-13; intel p3 200mhz; 128mb ram
>
> please take a look at the kswapd:
>
> CPU states: 0.0% user, 100.0% system, 0.0% nice, 0.0% idle
> Mem: 126244K av, 123064K used, 3180K free, 0K
> shrd, 24800K buff
> Swap: 526168K av, 54348K used, 471820K free
> 10672K cached
>
> PID USER PRI NI SIZE RSS SHARE STAT %CPU %MEM TIME COMMAND
> 5 root 20 0 0 0 0 RW 99.0 0.0 4318m
> kswapd <<=========
> 2093 root 13 0 1040 1016 872 R 0.9 0.8 0:01 top
>
> %CPU = 99.0!
>
> i've tested FW-1 NG FCS with a p2 60mhz 40mb ram and had no problems.
>
> any solution?
>
> bye,
> markus
>
>
> At 07:56 15.02.2002 +0100, you wrote:
>
> >Other way around: Your kernel is too old. The module was
> compiled for 2.4.9-7, but You're only running 2.4.7-10. Get
> the kernel updates from RedHat's site and install them (along
> with all of the other patches).
> >
> > -&
> >
> >> -----Urspr�ngliche Nachricht-----
> >> Von: Amin Tora [<mailto:[EMAIL PROTECTED]>mailto:[EMAIL PROTECTED]]
> >> Gesendet am: Freitag, 15. Februar 2002 07:09
> >> An: [EMAIL PROTECTED]
> >> Betreff: [FW-1] NG FP1 on Red Hat Linux 7.2
> >>
> >> Anyone have NG FP1 enforcement module running on Red Hat
> >> Linux 7.2 (Enigma)
> >> /w Kernel build 2.4.7-10 ???
> >>
> >> Everything works {CPSHARED, SIC, etc..} except for FW-1 -
> >> module not able to
> >> insert itself into kernel memory area... getting this error:
> >>
> >> --------------------
> >> Warning: kernel-module version mismatch
> >> /etc/fw.boot/modules/fwmod.2.4.x.o was compiled for
> >> kernel version
> >> 2.4.9-7
> >> while this kernel is version 2.4.7-10
> >> /etc/fw.boot/modules/fwmod.2.4.x.o: init_module: Operation
> >> not permitted
> >> Hint: insmod errors can be caused by incorrect module
> >> parameters, including
> >> invalid IO or IRQ parameters
> >> FireWall-1: insmod for fwmod failed
> >> --------------------
> >>
> >> too recent a kernel?
> >>
> >>
> >> Amin Tora, CISSP, CCSE, CCSI
> >> ePlus Technology Inc.
> >> <http://security.eplus.com>http://security.eplus.com
> >>
> >> =================================================
> >> To set vacation, Out Of Office, or away messages,
> >> send an email to [EMAIL PROTECTED]
> >> in the BODY of the email add:
> >> set fw-1-mailinglist nomail
> >> =================================================
> >> To unsubscribe from this mailing list,
> >> please see the instructions at
> >>
> <http://www.checkpoint.com/services/mailing.html>http://www.ch
eckpoint.com/services/mailing.html
>> =================================================
>> If you have any questions on how to change your
>> subscription options, email
>> [EMAIL PROTECTED]
>> =================================================
>>
=================================================
To set vacation, Out Of Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================
