cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Highlighted

System memory usage question

Hi,

We want to optimize memory usage of our MEF.

We are now touching 90% and this is causing us performance issues.

We would like to create an environment of lower memory usage.

The question is: What data can we get rid? I mean, we can plan a periodic deletion of audit information? If so, what is the specific information we could erase?

Even, it would be possible to program monitoring disk usage to delete the last record once you reach a ceiling?

Thanks very much in advance

4 Replies
Highlighted
Level 14
Report Inappropriate Content
Message 2 of 5

Re: System memory usage question

What software version are you running?

Off of the top of my head, I've never had to perform any kind of manual optimization of the product and would associate memory usage of that amount with either a software version which is missing a patch (and therefore may have a process that is gradually leaking memory) or an appliance which is struggling under the weight of traffic it is being required to pass.

The former can be addressed by getting the software up to date. The latter is more of an issue as it's an indication that you may need a more powerful appliance.

-Phil.

Highlighted
Level 14
Report Inappropriate Content
Message 3 of 5

Re: System memory usage question

The firewalls use RAM just like is explained on this site:  http://www.linuxatemyram.com/.  The firewall 'takes' it all and it looks like it's all used up when it, in fact, is not all used up.

Only if you are using swap memory (look at the output of the 'top' command) would I consider that you are having a memory issue.  If you are using swap, you need to buy more memory.  You cannot do anything on the firewall except maybe turn off AV-scanning to 'get more memory' from the box.  It's not like you can turn off startup services like on a WIndows box.

Highlighted

Re: System memory usage question

Hi again,


First  all thanks for your quick responses.

Phil, we are currently working with 8.2.1 version installed on May 28.
This is our local packages list:

HZKWSG-EJ10:Admn {1} % cf package list
                                             Local Packages
                                          -------------------
                         CommandCenter Management Version: 8.2.1.CC.5.2.1.01.01
What              When               Status     Description
================= ================== ========== =======================================================
8.1.1             04-Aug-11 10:37    obsolete   McAfee Firewall Enterprise 8.1.1 Maintenance Release
8.1.1HW04         04-Aug-11 10:37    obsolete   McAfee Firewall Enterprise 8.1.1HW04 Hardware Support for Models S4016 S5032 S6032
8.1.SOV39         20-Sep-11 17:36    obsolete   McAfee Firewall Enterprise 8.1.SOV39 McAfee Firewall Enterprise Alternate Anti-Virus Engine Version 4.64 Update.
8.1.2             20-Sep-11 17:52    obsolete   McAfee Firewall Enterprise 8.1.2 Maintenance Release
8.1.2P01          20-Sep-11 18:03    obsolete   McAfee Firewall Enterprise 8.1.2P01 8.1.2 Patch 01, Maintenance
8.1.SOV40         20-Sep-11 17:37    obsolete   McAfee Firewall Enterprise 8.1.SOV40 McAfee Firewall Enterprise Alternate Anti-Virus Engine Version 4.66 Update.
8.1.SOV41         20-Sep-11 17:39    obsolete   McAfee Firewall Enterprise 8.1.SOV41 McAfee Firewall Enterprise Alternate Anti-Virus Engine Version 4.66 Update.
8.2.0             23-Sep-11 15:53    installed  McAfee Firewall Enterprise 8.2.0 Certification and IPv6 Improvements
8.2.SOV43         09-Jan-12 16:46    loaded     McAfee Firewall Enterprise 8.2.SOV43 McAfee Firewall Enterprise Alternate Anti-Virus Engine Version 4.72 Update.
8.2.1             28-May-12 19:16    installed  McAfee Firewall Enterprise 8.2.1 MFE 8.2.1 Maintenance
8.2.1P01          11-Jun-12 13:43    loaded     McAfee Firewall Enterprise 8.2.1P01 General Maintenance
HZKWSG-EJ10:Admn {2} %


Slidel, we've tried to disable the AV and it´s clear the memory usage goes highly down but this is not a solution.

Some more memory usage info:

HZKWSG-EJ10:User {14} % df -h
Filesystem       Size    Used   Avail Capacity  Mounted on
/dev/mfid0s3a    155M     37M    105M    26%    /
devfs            1.0K    1.0K      0B   100%    /dev
/dev/mfid0s4h    1.9G    1.0G    763M    58%    /home
/dev/mfid0s3e    2.8G    1.0G    1.5G    41%    /secureos
/dev/mfid0s4d    248M     10K    228M     0%    /tmp
/dev/mfid0s3d    989M    281M    629M    31%    /usr
/dev/mfid0s4e     52G    4.9G     43G    10%    /var
/dev/mfid0s4f    177G    8.7G    155G     5%    /var/log
/dev/mfid0s4g    140G    1.1G    128G     1%    /var/spool
/dev/mfid0s1a    2.9G    1.7G    989M    64%    /vcdrom
HZKWSG-EJ10:User {15} %

Highlighted
Level 14
Report Inappropriate Content
Message 5 of 5

Re: System memory usage question

As sliedl mentioned the best command for looking at memory usage is the "top" command.

The df -h output just shows disk usage which, to me, looks OK.

-Phil.

You Deserve an Award
Don't forget, when your helpful posts earn a kudos or get accepted as a solution you can unlock perks and badges. Those aren't the only badges, either. How many can you collect? Click here to learn more.

Community Help Hub

    New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

  • Find Forum FAQs
  • Learn How to Earn Badges
  • Ask for Help
Go to Community Help

Join the Community

    Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

  • Get helpful solutions from McAfee experts.
  • Stay connected to product conversations that matter to you.
  • Participate in product groups led by McAfee employees.
Join the Community
Join the Community