This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Clear Memory without rebooting in Sophos XG

Hi Community,

Is there a way to clear memory (RAM) without rebooting in Sophos XG firewall? its firmware is SFOS 18.0.5 MR-5-Build586.

Memory went up to 90% last week. We rebooted the Sophos XG firewall. Then, Memory came back to around 30%. Now it has been running since 5 days. Now Memory has gone up to 75%.

Is there a way to clear memory (RAM) without rebooting in CLI mode? otherwise we will have to reboot again.

Thanks



This thread was automatically locked due to age.
  • Hi,
    You should check where the memory went.
    Which device do you use? How much memory the device have?


    Dirk

    Systema Gesellschaft für angewandte Datentechnik mbH  // Sophos Platinum Partner
    Sophos Solution Partner since 2003
    If a post solves your question, click the 'Verify Answer' link at this post.

  • Hi, 

    Thanks for your quick reply. 

    XG 430
    Total memory 16 GB

    Output of atop

    PID TID CID VPID CTID TRUN TSLPI TSLPU POLI NICE PRI RTPR CPUNR ST EXC S CPU CMD
    6191 -    host-------- 0 0 0 1 0 norm 0 120 0 0 -- - S 3% sslvpn
    3300 -    host-------- 0 0 0 7 0 norm 0 120 0 3 -- - S 2% garner
    14028 -  host-------- 0 0 0 7 0 norm 0 120 0 1 -- - S 2% snort
    14030 - host-------- 0 0 0 7 0 norm 0 120 0 3 -- - S 2% snort
    4837 -   host-------- 0 0 0 10 0 norm 0 120 0 0 -- - S 2% awarrenhttp
    14029 - host-------- 0 0 1 6 0 norm 0 120 0 2 -- - S 1% snort
    14027 - host-------- 0 0 0 7 0 norm 0 120 0 0 -- - S 1% snort
    6117 - host-------- 0 0 0 3 0 norm 0 120 0 3 -- - S 1% fqdnd
    3371 - host-------- 0 0 0 1 0 norm 0 120 0 0 -- - S 1% vfp_mflow_time
    11086 - host-------- 0 0 1 0 0 norm 0 120 0 2 -- - R 1% kworker/2:0
    6333 - host-------- 0 0 0 33 0 norm 0 120 0 2 -- - S 1% charon
    4752 - host-------- 0 0 0 1 0 norm 0 120 0 3 -- - S 1% nsxld
    12587 - host-------- 0 0 0 1 0 norm 0 120 0 2 -- - S 1% postgres
    12672 - host-------- 0 0 1 0 0 norm -20 100 0 2 -- - R 0% atop

    Output of free command

               total           used        free       shared buffers
    Mem: 16315952 15868892 447060 193616 160276
    -/+ buffers: 15708616 607336
    Swap: 2267112    45312     2221800

    Hope to hear from you,

  • Sorry, don't understand the output ...

    Please try

    top -> <shift>f -> n -> <ENTER>

    additional useful information:

    How many users? Bandwidth? Activated features? RED/SSL? 


    Dirk

    Systema Gesellschaft für angewandte Datentechnik mbH  // Sophos Platinum Partner
    Sophos Solution Partner since 2003
    If a post solves your question, click the 'Verify Answer' link at this post.

  • Why do you want to "clear RAM"? Is it affecting the performance of your appliance? Just because memory is "used" in a UNIX system does not mean that it's currently being used by a process, and that process will have to allocate more if it needs more. There's a difference between what UNIX has allocated to a process and how much of that RAM a process has actually used.

    Out XGS 87 routinely runs at 75% RAM utilized with no problems.

  • Hi,

    ram usage is only an issue if if is affecting performance and the system is swapping very heavily, otherwise as others have advised it is not an issue.

    Ian

    XG115W - v20 GA - Home

    XG on VM 8 - v20 GA

    If a post solves your question please use the 'Verify Answer' button.

  • Yes, It affects performance. Memory goes high from time to time. After going high memory. It will NOT go down again. Then, Users can't use it. Then will have to reboot it. How to get to know the root cause? What's going on inside? is  there a DOS attack? 

  • OK. It's not unexpected that memory might go up and not back down. But if users experience issues, that's definitely a problem.

    When you say "users can't use it" what do you mean? Traffic does not flow through it? Users cannot login to it? Traffic becomes slow? The detailed symptoms will help folks diagnose.

  • Ram usage is the issue. It affects the performance. then, Users complain. Only solution is rebooting. around 1000 users connect to it. mission critical environment. I opened a ticket. support asks me to flush reports. But, client does NOT need it.  /var partition  Used only 72% 

  • Thanks for your quick response, 

    When you say "users can't use it" what do you mean? 

    e-g - Users are promoted to enter username and password, when they use O365 portal. They enter, but can't login.  

  • Another example, Users can't do regular internet access. After rebooting, All will become normal.