🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: comp.security.firewalls
Article #379

failed alloc Checkpoint

#379
From: Firewall
Date: Mon, 01 Nov 2004 18:23
68 lines
3508 bytes
Below is the out put of a fw ctl pstat on both of my Nokia firewalls

Of interest is the Hash kernel memory, pertaining to the connection
table.

Total memory bytes  used:  7735064   unused:  9042152 (53%)   peak: 
7688747
Total memory blocks used:     1956   unused:     2139 (52%)

Is this utilisation high?  The peak value appears to be lower than the
used value.  How can this be?

Also the kmem stats
21769 failed alloc

What does this "failed alloc" counter mean?

The boxes are IP530s with 256M RAM running CPFW4.1.  
My_Live_Nokia_BOX[admin]# fw ctl pstat
Hash kernel memory (hmem) statistics:
  Total memory allocated: 16777216 bytes in 4095 4KB blocks using 1
pool
  Total memory bytes  used:  7735064   unused:  9042152 (53%)   peak: 
7688747
  Total memory blocks used:     1956   unused:     2139 (52%)
  Allocations: 1566079999 alloc, 0 failed alloc, 1565782667 free
System kernel memory (kmem) statistics:
  Total memory bytes  used: 35836242   peak: 36688299
  Allocations: 357615 alloc, 21769 failed alloc, 352745 free, 0 failed
free
Inspct: -1036650508 packets, -1735760691 operations, 887715715
lookups, -1951500668 record, -1852592722 extract
Cookies: 1605859132 total, 0 alloc, 0 free, 434820304 dup, -2071286067
get, 1376301625 put, -1144880978 len, 0 chain alloc, 0 chain free
Fragments: 931824 fragments, 461494 packets, 95 expired, 0 short, 0
large, 0 duplicates, 0 failures
Encryption: 0 encryption, 0 decryption, 0 short, 0 failures
Translation: 231008814/847959357 forw, 204864164/467675903 bckw,
435820247 tcpudp, 52731 icmp, 27894361-51800563 alloc


My_Backup_Nokia_BOX[admin]# fw ctl pstat
Hash kernel memory (hmem) statistics:
  Total memory allocated: 16777216 bytes in 4095 4KB blocks using 1
pool
  Total memory bytes  used:   376844   unused: 16400372 (97%)   peak: 
1241720
  Total memory blocks used:      118   unused:     3977 (97%)
  Allocations: 1224566034 alloc, 0 failed alloc, 1224558765 free
System kernel memory (kmem) statistics:
  Total memory bytes  used: 19611002   peak: 21030454
  Allocations: 14471322 alloc, 0 failed alloc, 14469354 free, 0 failed
free
Inspct: 712131458 packets, -808801861 operations, -2135335051 lookups,
494775 record, 1576382501 extract
Cookies: 1477103177 total, 0 alloc, 0 free, 73 dup, 1754045232 get,
275 put, -641680339 len, 0 chain alloc, 0 chain free
Fragments: 0 fragments, 0 packets, 0 expired, 0 short, 0 large, 0
duplicates, 0 failures
Encryption: 0 encryption, 0 decryption, 0 short, 0 failures
Translation: 2/388217065 forw, 46/1082207238 bckw, 48 tcpudp, 0 icmp,
0-51791854 alloc


Any info on this would be appreciated.


FWS
Technical Details
Message-ID: <67d150e6.0411011023.23597d37@posting.google.com>
Path: arc1-ca.pugleaf.net!g2news1.google.com!postnews1.google.com!not-for-mail

Show Full Headers
Complete Article Headers
X-Google-Thread: f922c,1d8a5d40c0aeb99,start
X-Google-Thread: fc559,1d8a5d40c0aeb99,start
X-Google-Attributes: gidf922c,gidfc559,public
X-Google-Language: ENGLISH,ASCII-7-bit
Path: arc1-ca.pugleaf.net!g2news1.google.com!postnews1.google.com!not-for-mail
From: firewallstarter@hotmail.com (Firewall)
Newsgroups: comp.security.firewalls,cp.products.firewall-1
Subject: failed alloc Checkpoint
Date: 1 Nov 2004 10:23:49 -0800
Organization: http://groups.google.com
Lines: 68
Message-ID: <67d150e6.0411011023.23597d37@posting.google.com>
NNTP-Posting-Host: 194.69.198.40
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 8bit
X-Trace: posting.google.com 1099333430 17860 127.0.0.1 (1 Nov 2004 18:23:50 GMT)
X-Complaints-To: groups-abuse@google.com
NNTP-Posting-Date: Mon, 1 Nov 2004 18:23:50 +0000 (UTC)