I have used fw ctl pstat command.
It says about 3Mbytes have been allocaated into FW-1's kernel memory 
and most of it is still available.
However looking at the way Solaris works, it appears that the size of 
freelist as found from vmstat and sar -r will apear to shrink to a very 
small value, determined by lotsfree.  In our case we have used the 
default which is 1/64 of the RAM i.e. 2Mbytyes.  The problem usually 
starts when the freelist attains the value of around 2Mbytes.
I was wondering whether increasing lostsfree (making it bigger that 
3Mbytes)would stop the machine hang.  Has it been tried?

Sujit

On Sat, 08 Jul 2000 15:07:02 -0600 "Jeffrey L. Oliver" 
<[EMAIL PROTECTED]> wrote:

> Sujit Choudhury wrote:
> > 
> > We are running Checkpoint FireWall-1 Version 4.0 Build 4094. I have
> > applied service pack 4 and 5 to bring it up to the latest build.  The
> > hardware is Sun Ultra 5/10, with 128Mbytes of memory.  The OS is
> > Solaris 2.6 with kernel patch 105181-21.  I am not running CDE so most
> > of the memory is used for running the OS and Firewall.
> > In spite of this I am getting system hang on a regular basis.  It seems
> > from sar output, whenever the free memory drops below a certain figure
> > we are then in the danger zone.
> > Has anybody come across this thing or any solution for this?  We are
> > having great difficulty in maintaing our service.
> > 
> > Many thanks
> > 
> > Sujit
> > 
> > ----------------------
> > Sujit Choudhury
> > Unix & E-Mail Systems Administrator
> > E-Mail    : [EMAIL PROTECTED]
> > Ext Tel No: 020 - 7753 3105
> > Internal Tel No: 2302
> > 
> > ================================================================================
> >      To unsubscribe from this mailing list, please see the instructions at
> >                http://www.checkpoint.com/services/mailing.html
> > ================================================================================
> 
> Sujit,
> 
> Just so you don't feel all alone, I also am experiencing this problem. 
> From
> my standpoint, it looks like a memory leak.  The Sun guys do not think so.
> 
> I have a Ultra 10 running 2.6, with the jumbo patch installed.  The machine
> has 128MB ram and 2 quad 10/100 nic's.  The console sits not logged in at
> the login prompt (not openwin or cde).  
> 
> If I use vmstat on the box, I can see that the memory goes away in about
> 8k chunks until I start using swap space.  It then keeps chunking away
> memory
> until I run out of swap and the machine will hang.
> 
> As yet, I have not found a fix. 
> 
> Jeff
> 
> BTW. If you get anywhere with this, pleas let me know.
> -- 
>      Sys Admin. It's a dirty job, but someone said I had to do it!
> ------------------------------------------------------------------------
>       Jeffrey L. Oliver               Tel:  (403) 329-5162
>        Network Analyst                Cell: (403) 315-4461
> The University of Lethbridge
>    4401 University Drive             email: [EMAIL PROTECTED]
>     Lethbridge, Alberta          www:  http://home.uleth.ca/~jeff.oliver





================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================

Reply via email to