This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Memory swap usage 9.1GA and UTM220

We have a UTM220 device, upgraded to 9.1 yesterday.

40 devices/users protected.
Network Visibility, POP3 Proxy, RED, Endpoint Protection, WAF and HA are all OFF.
HTTP Proxy web caching is off.
IPS is using only 7980 of 15806 patterns.

75-300 users are recommended by Sophos for this unit type.

However memory swap climbed almost instantly to over 50% of RAM. I know there has been some discussion on swap usage, but am unsure of the outcome. CPU looks fine.

Memory.png

Can someone send me a summary of Sophos comments on swap/memory usage as I'd really not like to throw 100-200 users on this device...

This thread was automatically locked due to age.

Parents

0 Siarom over 11 years ago

Could that be the problem?

secg97:/root # ls -ls /var/storage/cores/
total 27872
27872 -rw-r--r-- 1 root root 28540928 May 16 12:15 websec-reporter.12854

secg97:/root # gdb /var/chroot-http/usr/bin/httpproxy /var/storage/cores/websec-reporter.12854
GNU gdb (GDB) SUSE (7.3-0.8.2.770.g338214c.rb1)
Copyright (C) 2011 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later 
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.  Type "show copying"
and "show warranty" for details.
This GDB was configured as "i686-suse-linux".
For bug reporting instructions, please see:
...
Reading symbols from /var/storage/chroot-http/usr/bin/httpproxy...Missing separate debuginfo for /var/storage/chroot-http/usr/bin/httpproxy
Try: zypper install -C "debuginfo(build-id)=20add27afa9837ca3445b528c04732c8825ed79e"
(no debugging symbols found)...done.

warning: core file may not match specified executable file.
[New LWP 12920]
[New LWP 12854]
[New LWP 12918]
[New LWP 12919]
Core was generated by `/usr/local/bin/reporter/websec-reporter.pl'.
Program terminated with signal 11, Segmentation fault.
#0  0x08057b83 in ?? ()
(gdb) bt full
#0  0x08057b83 in ?? ()
No symbol table info available.
#1  0x08058a46 in ?? ()
No symbol table info available.
#2  0x0805507d in ?? ()
No symbol table info available.
#3  0x0806b345 in ?? ()
No symbol table info available.
#4  0x080651cc in get_afc_profile ()
No symbol table info available.
#5  0xf746a809 in ?? ()
No symbol table info available.
#6  0x00000000 in ?? ()
No symbol table info available.

There are proxy correction will only be released in version 9.102.
https://community.sophos.com/products/unified-threat-management/astaroorg/f/80/t/65155
https://community.sophos.com/products/unified-threat-management/astaroorg/f/80/t/65129

Reply

0 Siarom over 11 years ago

Could that be the problem?

secg97:/root # ls -ls /var/storage/cores/
total 27872
27872 -rw-r--r-- 1 root root 28540928 May 16 12:15 websec-reporter.12854

secg97:/root # gdb /var/chroot-http/usr/bin/httpproxy /var/storage/cores/websec-reporter.12854
GNU gdb (GDB) SUSE (7.3-0.8.2.770.g338214c.rb1)
Copyright (C) 2011 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later 
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.  Type "show copying"
and "show warranty" for details.
This GDB was configured as "i686-suse-linux".
For bug reporting instructions, please see:
...
Reading symbols from /var/storage/chroot-http/usr/bin/httpproxy...Missing separate debuginfo for /var/storage/chroot-http/usr/bin/httpproxy
Try: zypper install -C "debuginfo(build-id)=20add27afa9837ca3445b528c04732c8825ed79e"
(no debugging symbols found)...done.

warning: core file may not match specified executable file.
[New LWP 12920]
[New LWP 12854]
[New LWP 12918]
[New LWP 12919]
Core was generated by `/usr/local/bin/reporter/websec-reporter.pl'.
Program terminated with signal 11, Segmentation fault.
#0  0x08057b83 in ?? ()
(gdb) bt full
#0  0x08057b83 in ?? ()
No symbol table info available.
#1  0x08058a46 in ?? ()
No symbol table info available.
#2  0x0805507d in ?? ()
No symbol table info available.
#3  0x0806b345 in ?? ()
No symbol table info available.
#4  0x080651cc in get_afc_profile ()
No symbol table info available.
#5  0xf746a809 in ?? ()
No symbol table info available.
#6  0x00000000 in ?? ()
No symbol table info available.

Children

No Data