Article View: comp.security.firewalls
Article #380Re: failed alloc Checkpoint
From: Rob Hughes
Date: Tue, 02 Nov 2004 01:51
Date: Tue, 02 Nov 2004 01:51
20 lines
2120 bytes
2120 bytes
Firewall is alleged to have said in comp.security.firewalls: > 21769 failed alloc > > What does this "failed alloc" counter mean? > It's high for your config, apparently. What it means is that the firewall kernel needed to allocate memory and didn't have enough free to allocate a block of the requested size, or just couldn't find a large enough block which can happen when the firewall memory becomes fragmented. Use modzap to increase the kernel memory, or reboot more often if these boxes have been up a long time. modzap _fwhmem $FWDIR/boot/modules/fwmod.o 0x1000000 That will increase it to 10 meg. -- If at first you don't succeed, skydiving is not for you.
Technical Details
Message-ID:
<5ImdnR4IP_mhdRvcRVn-vQ@comcast.com>Path:
arc1-ca.pugleaf.net!g2news1.google.com!news1.google.com!news.glorb.com!news-feed01.roc.ny.frontiernet.net!nntp.frontiernet.net!nntp.giganews.com.MISMATCH!border1.nntp.dca.giganews.com!border2.nntp.dca.giganews.com!nntp.giganews.com!nntp.comcast.com!news.comcast.com.POSTED!not-for-mailReferences:
<67d150e6.0411011023.23597d37@posting.google.com>Show Full Headers
Complete Article Headers
X-Google-Thread: f922c,1d8a5d40c0aeb99 X-Google-Thread: fc559,1d8a5d40c0aeb99 X-Google-Attributes: gidf922c,gidfc559,public X-Google-Language: ENGLISH,ASCII-7-bit Path: arc1-ca.pugleaf.net!g2news1.google.com!news1.google.com!news.glorb.com!news-feed01.roc.ny.frontiernet.net!nntp.frontiernet.net!nntp.giganews.com.MISMATCH!border1.nntp.dca.giganews.com!border2.nntp.dca.giganews.com!nntp.giganews.com!nntp.comcast.com!news.comcast.com.POSTED!not-for-mail NNTP-Posting-Date: Mon, 01 Nov 2004 19:51:55 -0600 From: Rob Hughes <rob@robhughes.com> Subject: Re: failed alloc Checkpoint Newsgroups: comp.security.firewalls,cp.products.firewall-1 Followup-To: comp.security.firewalls Reply-To: rob@robhughes.com Date: Mon, 01 Nov 2004 19:51:54 -0600 References: <67d150e6.0411011023.23597d37@posting.google.com> User-Agent: KNode/0.8.1 MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7Bit Message-ID: <5ImdnR4IP_mhdRvcRVn-vQ@comcast.com> Lines: 20 NNTP-Posting-Host: 24.1.137.166 X-Trace: sv3-PNYraXM1gDUe87xQNm4lgqAN4I9cFJE36/CAbbn1yq5KwAllquyGYwTBMbGSXt+bLEO3RDDh106ieXL!YsIJgRe0vmKYFb1N12AGskjc91pjdpT0Y7cRlx8FKfde2XYO1JvZyNtNCLbJ X-Complaints-To: abuse@comcast.net X-DMCA-Complaints-To: dmca@comcast.net X-Abuse-and-DMCA-Info: Please be sure to forward a copy of ALL headers X-Abuse-and-DMCA-Info: Otherwise we will be unable to process your complaint properly X-Postfilter: 1.3.20