[c-nsp] PIX 515E memory behaviour

[Łukasz Bromirski]

Alex Foster wrote:
> Just recenty upgraded our 515e failover pair to 7.1(2) - I havent
> upgraded the memory to 128Mb as per Ciscos recommendation - this
> is getting done in a couple of days - but with the original 64Mb
> in place, the firewalls are happy - for about 6-8 hours until
> the active runs out of memory. Is this normal behaviour - or is
> the software possibly corrupt - I know your gonna tell me this
> is the reason why 128Mb is reccommended - but is it normal
> behaviour for the memory in a PIX to be slowly consumed
> (even during  low traffic periods) - if so why is this.

If the specs say You need 128MB there's no sense debugging a problem
with less memory. Simple as that.

That being said, I'd simply check from time to time, which process
is taking the memory (sh proc mem dumped with 15-minutes interval and
then compared).

And as a side note, if You're not doing anything fancy with the
VPNs, use 7.2(1).

-- 
"Confidence is what you have before you    |            Łukasz Bromirski
 understand the problem." -- Woody Allen   |        lukasz:bromirski,net