[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] Re: [FW1] Strange things in RH62 + Fw1-41-Sp2( kmalloc: Size (275548)too large )
Sid, I was wondering if you or anyone else have tried SP3... Cristian Sid Van den Heede wrote: > > This has been a long outstanding problem. I have been dealing with it for > months, and am no further ahead. I have supplied my complete rulebase to my > vendor, so surely they or Checkpoint could reproduce the problem. Given the > number of people on this list with the same problem, it behooves Checkpoint to > act...NOW! > > FW1 is trying to allocate a chunk of kernel memory that, in the example below, > is 275,548 bytes. The maximum size of a block of kernel memory that Linux 2.2 > will allocate is 128KB. There are ways to get bigger chunks of memory, but not > via kmalloc. > > I tried increasing the cache sizes table, but the kernel failed to initialize > the cache at boot time, and promptly halted. This is due to the number of bits > that are allocated for a combination of page size and chunk size. An obscure > reference suggested that it could be possible to create a class of memory that > would accommodate larger sizes. Kernel experts anyone? > > Thanks for the clue about fwhmem on the fwinsmod line. I tried it, but going > in the opposite direction. I added fwhmem=128000, a number less than 128KB, > just to see if that would limit the amount of memory that fwd tries to > allocate. Unfortunately it had no impact. > > At this point it appears that the options are: > > 1. Get Checkpoint to fix the code. > > 2. Get Checkpoint to fix the code. > > 3. Use a trivial rulebase. I tried one with about a dozen entries. That > wasn't small enough, but it was necessary to accommodate our requirements. > > 4. Get Checkpoint to fix the code. > > 5. Work on a way for kmalloc to allocate more memory. > > 6. Get Checkpoint to fix the code. > > 7. Use another platform (Solaris, etc). > > Did I mention that Checkpoint should fix the code? > > BTW, has anybody seen this on the Linux-based appliances, such as the PDS-2100 > fron intrustion.com? > > On Wed, 17 Jan 2001, cristian nicolae wrote: > > > Date: Wed, 17 Jan 2001 23:28:50 +0100 > > From: cristian nicolae <[email protected]> > > To: Eugene Alperovich <[email protected]> > > Cc: "'[email protected]'" > > <[email protected]> > > Subject: Re: [FW1] Strange things in RH62 + Fw1-41-Sp2( kmalloc: Size > > (275548) too large ) > > > > > > Hi Eugene, > > I had that too. > > Generally, at least in my case, this appeared after I loaded > > a huge security policy. Other people had that too. Until now I could not > > see any pointers to a final solution. Maybe it's worth trying SP3. > > > > Cristian > > > > > > > > Eugene Alperovich wrote: > > > > > > Hi all, > > > > > > We have been having this thing with a RH62 running Fw1-4.1-SP2, > > > when I check the kernel Log, I see the following lines repeating themselves > > > hundreds of times: > > > > > > Jan 17 07:48:48 firewall kernel: kmalloc: Size (275548) too large > > > Jan 17 07:48:48 firewall kernel: FW-1: b_getvals: fw_kmalloc(275536) failed > > > Jan 17 07:48:48 firewall kernel: kmalloc: Size (275548) too large > > > Jan 17 07:48:48 firewall kernel: FW-1: b_getvals: fw_kmalloc(275536) failed > > > > > > The numbers never change. > > > We tried including the "fwhmem=5000000" option in the fwinsmod on boot, but > > > to no avail. > > > > > > Did anyone ever see this? > > > > > > Eugene Alperovich, Integrator, > > > Xpert Trusted Systems Ltd. > > > e-mail: [email protected] > > > <<MyVCARD.vcf>> > > > > > > ================================================================================ > > To unsubscribe from this mailing list, please see the instructions at > > http://www.checkpoint.com/services/mailing.html > > ================================================================================ > > > > ------------------------------------------------------------------ > Sid Van den Heede Open Text Corporation >185 Columbia Street West >(fax) Waterloo, Ontario, Canada N2L 5Z5 > [email protected] OpenPGP key available on www.keyserver.net ================================================================================ To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================================================
|