Article View: comp.security.firewalls
Article #379failed alloc Checkpoint
From: Firewall
Date: Mon, 01 Nov 2004 18:23
Date: Mon, 01 Nov 2004 18:23
68 lines
3508 bytes
3508 bytes
Below is the out put of a fw ctl pstat on both of my Nokia firewalls Of interest is the Hash kernel memory, pertaining to the connection table. Total memory bytes used: 7735064 unused: 9042152 (53%) peak: 7688747 Total memory blocks used: 1956 unused: 2139 (52%) Is this utilisation high? The peak value appears to be lower than the used value. How can this be? Also the kmem stats 21769 failed alloc What does this "failed alloc" counter mean? The boxes are IP530s with 256M RAM running CPFW4.1. My_Live_Nokia_BOX[admin]# fw ctl pstat Hash kernel memory (hmem) statistics: Total memory allocated: 16777216 bytes in 4095 4KB blocks using 1 pool Total memory bytes used: 7735064 unused: 9042152 (53%) peak: 7688747 Total memory blocks used: 1956 unused: 2139 (52%) Allocations: 1566079999 alloc, 0 failed alloc, 1565782667 free System kernel memory (kmem) statistics: Total memory bytes used: 35836242 peak: 36688299 Allocations: 357615 alloc, 21769 failed alloc, 352745 free, 0 failed free Inspct: -1036650508 packets, -1735760691 operations, 887715715 lookups, -1951500668 record, -1852592722 extract Cookies: 1605859132 total, 0 alloc, 0 free, 434820304 dup, -2071286067 get, 1376301625 put, -1144880978 len, 0 chain alloc, 0 chain free Fragments: 931824 fragments, 461494 packets, 95 expired, 0 short, 0 large, 0 duplicates, 0 failures Encryption: 0 encryption, 0 decryption, 0 short, 0 failures Translation: 231008814/847959357 forw, 204864164/467675903 bckw, 435820247 tcpudp, 52731 icmp, 27894361-51800563 alloc My_Backup_Nokia_BOX[admin]# fw ctl pstat Hash kernel memory (hmem) statistics: Total memory allocated: 16777216 bytes in 4095 4KB blocks using 1 pool Total memory bytes used: 376844 unused: 16400372 (97%) peak: 1241720 Total memory blocks used: 118 unused: 3977 (97%) Allocations: 1224566034 alloc, 0 failed alloc, 1224558765 free System kernel memory (kmem) statistics: Total memory bytes used: 19611002 peak: 21030454 Allocations: 14471322 alloc, 0 failed alloc, 14469354 free, 0 failed free Inspct: 712131458 packets, -808801861 operations, -2135335051 lookups, 494775 record, 1576382501 extract Cookies: 1477103177 total, 0 alloc, 0 free, 73 dup, 1754045232 get, 275 put, -641680339 len, 0 chain alloc, 0 chain free Fragments: 0 fragments, 0 packets, 0 expired, 0 short, 0 large, 0 duplicates, 0 failures Encryption: 0 encryption, 0 decryption, 0 short, 0 failures Translation: 2/388217065 forw, 46/1082207238 bckw, 48 tcpudp, 0 icmp, 0-51791854 alloc Any info on this would be appreciated. FWS
Technical Details
Message-ID:
<67d150e6.0411011023.23597d37@posting.google.com>Path:
arc1-ca.pugleaf.net!g2news1.google.com!postnews1.google.com!not-for-mailShow Full Headers
Complete Article Headers
X-Google-Thread: f922c,1d8a5d40c0aeb99,start X-Google-Thread: fc559,1d8a5d40c0aeb99,start X-Google-Attributes: gidf922c,gidfc559,public X-Google-Language: ENGLISH,ASCII-7-bit Path: arc1-ca.pugleaf.net!g2news1.google.com!postnews1.google.com!not-for-mail From: firewallstarter@hotmail.com (Firewall) Newsgroups: comp.security.firewalls,cp.products.firewall-1 Subject: failed alloc Checkpoint Date: 1 Nov 2004 10:23:49 -0800 Organization: http://groups.google.com Lines: 68 Message-ID: <67d150e6.0411011023.23597d37@posting.google.com> NNTP-Posting-Host: 194.69.198.40 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 8bit X-Trace: posting.google.com 1099333430 17860 127.0.0.1 (1 Nov 2004 18:23:50 GMT) X-Complaints-To: groups-abuse@google.com NNTP-Posting-Date: Mon, 1 Nov 2004 18:23:50 +0000 (UTC)