[c-nsp] PIX 515E memory behaviour

[Alex Foster]

Hi,
 
Understood - and the memory upgrade will happen..so if it still happens after - I need to look at what process is eating the memory - how can you tell from show proc mem which process is using more memory than it should - Im trying to relate this to a routers output but the PIX isnt very clear 
 
One process 'Dispatch Unit' appears to have 96854682 bytes allocated but also has a similar amount in freed - so Im really not sure if this is normal..??  Which column indicates current allocated/consumed..??
 
Regards
 
Alex

________________________________

From: Lukasz Bromirski [mailto:lukasz at bromirski.net]
Sent: Sat 25/11/2006 08:44
To: Alex Foster
Cc: cisco-nsp at puck.nether.net
Subject: Re: [c-nsp] PIX 515E memory behaviour



Alex Foster wrote:
> Just recenty upgraded our 515e failover pair to 7.1(2) - I havent
> upgraded the memory to 128Mb as per Ciscos recommendation - this
> is getting done in a couple of days - but with the original 64Mb
> in place, the firewalls are happy - for about 6-8 hours until
> the active runs out of memory. Is this normal behaviour - or is
> the software possibly corrupt - I know your gonna tell me this
> is the reason why 128Mb is reccommended - but is it normal
> behaviour for the memory in a PIX to be slowly consumed
> (even during  low traffic periods) - if so why is this.

If the specs say You need 128MB there's no sense debugging a problem
with less memory. Simple as that.

That being said, I'd simply check from time to time, which process
is taking the memory (sh proc mem dumped with 15-minutes interval and
then compared).

And as a side note, if You're not doing anything fancy with the
VPNs, use 7.2(1).

--
"Confidence is what you have before you    |            Lukasz Bromirski
 understand the problem." -- Woody Allen   |        lukasz:bromirski,net


This message has been scanned for viruses by MailController - www.MailController.altohiway.com




The information in this e-mail and any attachments is confidential and may be subject to legal professional privilege. It is intended solely for the attention and use of the named addressee(s). If you are not the intended recipient, or person responsible for delivering this information to the intended recipient, please notify the sender immediately. Unless you are the intended recipient or his/her representative you are prohibited from, and therefore must not, read, copy, distribute, use or retain this message or any part of it. The views expressed in this e-mail may not represent those of Gamma Telecom.

This message has been scanned for viruses by MailController