Hi,

I'm running a netfilter/iptables firewall with Linux
2.4.18 + iptables 1.2.5 patch-o-matic (portions of
it).

I've been having problems with memory consumption.
Basically, as time goes by, 4kb chunks of memory are
consumed every few seconds. This continues until all
memory is consumed and nothing else can run, or the
system locks up and freezes.

I would like some hints on how to track down what is
causing this memory leak. I have is a customized
RedHat running on a CD and custom kernel running
netfilter.

Any help would be appreciated!
- D.


Here is some info:

1108 root@firewall:/#cat /proc/meminfo 
        total:    used:    free:  shared: buffers: 
cached:
Mem:  261722112 74821632 186900480        0   716800
35336192
Swap:        0        0        0
MemTotal:       255588 kB
MemFree:        182520 kB
MemShared:           0 kB
Buffers:           700 kB
Cached:          34508 kB
SwapCached:          0 kB
Active:           9128 kB
Inactive:        32612 kB
HighTotal:           0 kB
HighFree:            0 kB
LowTotal:       255588 kB
LowFree:        182520 kB
SwapTotal:           0 kB
SwapFree:            0 kB


1109 root@firewall:/#lsmod
Module                  Size  Used by    Tainted: P  
ppp_deflate            41696   2  (autoclean)
ppp_async               6624   1  (autoclean)
ppp_generic            17256   3  (autoclean)
[ppp_deflate ppp_async]
slhc                    4592   1  (autoclean)
[ppp_generic]
3c509                   8096   1  (autoclean)
tulip                  39776   3 
ipt_string              9760   4  (autoclean)
ipt_REJECT              2752 596  (autoclean)
ipt_state                608  50  (autoclean)
ipt_LOG                 3392   5  (autoclean)
ipt_mac                  640   5  (autoclean)
ip_nat_ftp              3200   0  (autoclean) (unused)
ip_conntrack_ftp        3584   0  (autoclean)
[ip_nat_ftp]
ip_nat_irc              2656   0  (autoclean) (unused)
ip_conntrack_irc        2592   0  (autoclean)
[ip_nat_irc]
iptable_nat            14868   3  (autoclean)
[ip_nat_ftp ip_nat_irc]
ip_conntrack           15660   4  (autoclean)
[ipt_state ip_nat_ftp ip_conntrack_ftp ip_nat_irc
ip_conntrack_irc iptable_nat]
iptable_mangle          2144   0  (autoclean) (unused)
iptable_filter          1760   1  (autoclean)
ip_tables              11680  10  [ipt_string
ipt_REJECT ipt_state ipt_LOG ipt_mac iptable_nat
iptable_mangle iptable_filter]


1111 root@firewall:/#wc -l /proc/net/ip_conntrack 
      5 /proc/net/ip_conntrack


1112 root@firewall:/#cat /proc/slabinfo 
slabinfo - version: 1.1 (SMP)
kmem_cache            64     64    244    4    4    1
:  252  126
ip_fib_hash          113    113     32    1    1    1
:  252  126
ip_conntrack          92    154    352   13   14    1
:  124   62
ip_mrt_cache           0      0     96    0    0    1
:  252  126
tcp_tw_bucket          0      0     96    0    0    1
:  252  126
tcp_bind_bucket      113    113     32    1    1    1
:  252  126
tcp_open_request      59     59     64    1    1    1
:  252  126
inet_peer_cache       59     59     64    1    1    1
:  252  126
ip_dst_cache         120    120    192    6    6    1
:  252  126
arp_cache             30     30    128    1    1    1
:  252  126
uhci_urb_priv         56     56     68    1    1    1
:  252  126
blkdev_requests      280    280     96    7    7    1
:  252  126
devfsd_event         126    169     20    1    1    1
:  252  126
dnotify cache          0      0     20    0    0    1
:  252  126
file lock cache       42     42     92    1    1    1
:  252  126
fasync cache           0      0     16    0    0    1
:  252  126
uid_cache            113    113     32    1    1    1
:  252  126
skbuff_head_cache    336    336    160   14   14    1
:  252  126
sock                  36     36    832    4    4    2
:  124   62
sigqueue              29     29    132    1    1    1
:  252  126
cdev_cache           228    354     64    4    6    1
:  252  126
bdev_cache            59     59     64    1    1    1
:  252  126
mnt_cache             59     59     64    1    1    1
:  252  126
inode_cache        41992  41992    480 5249 5249    1
:  124   62
dentry_cache       43110  43110    128 1437 1437    1
:  252  126
filp                 360    360    128   12   12    1
:  252  126
names_cache            4      4   4096    4    4    1
:   60   30
buffer_head         8480   8480     96  212  212    1
:  252  126
mm_struct             48     48    160    2    2    1
:  252  126
vm_area_struct       634    760     96   19   19    1
:  252  126
fs_cache              59     59     64    1    1    1
:  252  126
files_cache           36     36    416    4    4    1
:  124   62
signal_act            33     33   1312   11   11    1
:   60   30
size-131072(DMA)       0      0 131072    0    0   32
:    0    0
size-131072            0      0 131072    0    0   32
:    0    0
size-65536(DMA)        0      0  65536    0    0   16
:    0    0
size-65536             1      1  65536    1    1   16
:    0    0
size-32768(DMA)        0      0  32768    0    0    8
:    0    0
size-32768             0      0  32768    0    0    8
:    0    0
size-16384(DMA)        0      0  16384    0    0    4
:    0    0
size-16384             0      0  16384    0    0    4
:    0    0
size-8192(DMA)         0      0   8192    0    0    2
:    0    0
size-8192              1      2   8192    1    2    2
:    0    0
size-4096(DMA)         0      0   4096    0    0    1
:   60   30
size-4096             12     12   4096   12   12    1
:   60   30
size-2048(DMA)         0      0   2048    0    0    1
:   60   30
size-2048            152    152   2048   76   76    1
:   60   30
size-1024(DMA)         0      0   1024    0    0    1
:  124   62
size-1024            108    108   1024   27   27    1
:  124   62
size-512(DMA)          0      0    512    0    0    1
:  124   62
size-512              40     40    512    5    5    1
:  124   62
size-256(DMA)          0      0    256    0    0    1
:  252  126
size-256             210    210    256   14   14    1
:  252  126
size-128(DMA)         30     30    128    1    1    1
:  252  126
size-128            1440   1440    128   48   48    1
:  252  126
size-64(DMA)           0      0     64    0    0    1
:  252  126
size-64              177    177     64    3    3    1
:  252  126
size-32(DMA)         113    113     32    1    1    1
:  252  126
size-32              904    904     32    8    8    1
:  252  126


__________________________________________________
Do You Yahoo!?
Yahoo! Sports - live college hoops coverage
http://sports.yahoo.com/

Reply via email to