[c-nsp] PIX 7.01(4)8 cpu-hog

[Koen Peetermans]

It might be worthwile to upgrade to 7.1(1), however.

It looks like 7.0.4(8) was really a very unstable interim release. 7.0.4(5)
was good, though.

7.1(1) is basically only a bugfix for the PIX platform (later than
7.0.4(x)), no new features added for the PIX, but many nice features for the
ASA.

The only problem I see with this version is that the image sizes have
increased a lot due to the added features on the ASA, and the fact that -I
think- it really is the same binary image on the PIX as on the ASA. Count on
losing a couple of available DRAM megs when you upgrade to this version.

Kind regards,

Koen.
 

-----Original Message-----
From: Andreas S. Kerber [mailto:ask at ag-trek.de] 
Sent: woensdag 22 februari 2006 21:31
To: Koen Peetermans
Cc: cisco-nsp at puck.nether.net
Subject: Re: [c-nsp] PIX 7.01(4)8 cpu-hog

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Wed, Feb 22, 2006 at 09:17:00PM +0100, Koen Peetermans wrote:
> Is this pix running OSPF ?
> I had major problems with OSPF taking a lot of CPU with this
version.......
> This problem is not present on 7.1(1)

Nope, we're not using OSPF. The PIX simply has 4 physical interfaces,
some access lists and does NAT - nothing really special.

I've noticed that the memory consumption of "emweb/https" increases by
~1,5MB
each time somebody is using or quitting the ASDM. Funny is that this does
not occur with another PIX which is running the same release.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.2 (GNU/Linux)

iD8DBQFD/MntP0gnkXA27R8RAnIBAKCkKMrQAisALbufdvd1g3zfBFTp2wCfcH3V
k7UEwO77AmcqiBG6SYKvDNc=
=oYn9
-----END PGP SIGNATURE-----