On Mon, 19 Jan 2004, Marko Nurmenniemi wrote: > Hi, > > I had a freeze on the system ten minutes ago and found this on the > logs...firewall and the connection was OK after a minute or so. No > booting or any other measures needed. > > My connection is blasted with some traffic, there are 1623 denied or > rejected packets in logs and FW has been up for three days now. At the > time of this log I was accessing the shorewall.log from weblet. > > Is there something that interests the developers? > Do you need additional info? > > (http://192.168.1.254/cgi-bin/viewlogs?messages.3.gz+messages.2.gz+messages.1.gz+messages.0+messages) > ************ LOG ************************** > Jan 19 12:40:54 firewall -- MARK -- > Jan 19 16:40:54 firewall -- MARK -- > Jan 19 20:40:54 firewall -- MARK -- > Jan 20 00:01:10 firewall kernel: __alloc_pages: 0-order allocation > failed (gfp=0x1d2/0) > Jan 20 00:01:17 firewall last message repeated 17 times > Jan 20 00:01:17 firewall kernel: __alloc_pages: 0-order allocation > failed (gfp=0x1f0/0)
This is a kernel issue... if it corresponds to a bug, kernel programmers will have to be informed of it. However, I suspect not, since: http://lists.suse.com/archive/suse-linux-e/2003-Jul/1203.html suggests that this is a symptom of low memory. (Subsequent discussion suggests that a full root filesystem can do this also.) Low memory can occur if your router is NATing a lot of different connections (even short duration ones). Adding memory or reshuffling your ramdisk allocations may help in such cases. looking at /proc/net/ip_conntrack can give you an idea of the number of connections being supported. --------------------------------------------------------------------------- Jeff Newmiller The ..... ..... Go Live... DCN:<[EMAIL PROTECTED]> Basics: ##.#. ##.#. Live Go... Live: OO#.. Dead: OO#.. Playing Research Engineer (Solar/Batteries O.O#. #.O#. with /Software/Embedded Controllers) .OO#. .OO#. rocks...2k --------------------------------------------------------------------------- ------------------------------------------------------- The SF.Net email is sponsored by EclipseCon 2004 Premiere Conference on Open Tools Development and Integration See the breadth of Eclipse activity. February 3-5 in Anaheim, CA. http://www.eclipsecon.org/osdn ------------------------------------------------------------------------ leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
