[FW1] System Locking Up

[Evans <devans@revenue.state.il.us>]

Hello all, Hopefully someone out there can help me as I am on a sinking
ship. Ship vital signs are: Sun Ultra-1, 128m ram, Solaris 2.6,
Firewall-1 sp1, FDDI to our backbone, and a Quad FastEthernet for dmz's
and Internet connection.

For reasons unknown to me it just locks up completely, requiring a power
down/up. The only clues I can find are once I seen the monitor stating
failure to alloc buffer memory.... over and over... The other clue is
when this happens my log file dis-appears. It seems to happen about
every 5-6 hours, whereas, I had experienced it about once every ten
days. Not knowing what else might be of help I also included the output
of fw ctl pstat below
hmem kernel memory statistics:
Hash memory statistics
Total memory blocks allocated: 15
Total memory used 20060 bytes
Total number of items: 366
Total number of failed allocations: 0
Unused memory percentage: 68%
Detailed statistics according to item size:
Size  16:   Blocks:   1   Full blocks:   0   Nitems:    5 unused memory
99%
Size  20:   Blocks:   1   Full blocks:   0   Nitems:    2 unused memory
100%
Size  24:   Blocks:   1   Full blocks:   0   Nitems:   85 unused memory
51%
Size  32:   Blocks:   1   Full blocks:   0   Nitems:    3 unused memory
98%
Size  52:   Blocks:   2   Full blocks:   0   Nitems:   69 unused memory
57%
Size  60:   Blocks:   1   Full blocks:   0   Nitems:    9 unused memory
87%
Size  68:   Blocks:   4   Full blocks:   0   Nitems:  124 unused memory
49%
Size  76:   Blocks:   4   Full blocks:   0   Nitems:   69 unused memory
68%
Inspct: 735943 packets, 211452716 operations, 7883771 lookups, 77559
record, 67971407 extract
Cookies: 2730124 total, 0 alloc, 0 free, 0 dup, 2434508 get, 1035071
put, 5236322 len, 0 chain alloc, 0 chain free
Fragments: 76136 fragments, 1209 expired, 0 packets
Encryption: 0 encryption, 0 decryption, 0 short, 0 failures
Translation: 196480/1629327 forw, 221005/1634943 bckw, 417475 tcpudp, 10
icmp, 13337-13705 alloc

Any and all help gratefully accepted,
D Evans




================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================