4 Replies Latest reply on Jun 14, 2012 7:30 AM by PhilM

    System memory usage question



      We want to optimize memory usage of our MEF.

      We are now touching 90% and this is causing us performance issues.

      We would like to create an environment of lower memory usage.

      The question is: What data can we get rid? I mean, we can plan a periodic deletion of audit information? If so, what is the specific information we could erase?

      Even, it would be possible to program monitoring disk usage to delete the last record once you reach a ceiling?

      Thanks very much in advance

        • 1. Re: System memory usage question

          What software version are you running?


          Off of the top of my head, I've never had to perform any kind of manual optimization of the product and would associate memory usage of that amount with either a software version which is missing a patch (and therefore may have a process that is gradually leaking memory) or an appliance which is struggling under the weight of traffic it is being required to pass.


          The former can be addressed by getting the software up to date. The latter is more of an issue as it's an indication that you may need a more powerful appliance.



          • 2. Re: System memory usage question

            The firewalls use RAM just like is explained on this site:  http://www.linuxatemyram.com/.  The firewall 'takes' it all and it looks like it's all used up when it, in fact, is not all used up.


            Only if you are using swap memory (look at the output of the 'top' command) would I consider that you are having a memory issue.  If you are using swap, you need to buy more memory.  You cannot do anything on the firewall except maybe turn off AV-scanning to 'get more memory' from the box.  It's not like you can turn off startup services like on a WIndows box.

            • 3. Re: System memory usage question

              Hi again,

              First  all thanks for your quick responses.


              Phil, we are currently working with 8.2.1 version installed on May 28.
              This is our local packages list:


              HZKWSG-EJ10:Admn {1} % cf package list
                                                           Local Packages
                                       CommandCenter Management Version: 8.2.1.CC.
              What              When               Status     Description
              ================= ================== ========== =======================================================
              8.1.1             04-Aug-11 10:37    obsolete   McAfee Firewall Enterprise 8.1.1 Maintenance Release
              8.1.1HW04         04-Aug-11 10:37    obsolete   McAfee Firewall Enterprise 8.1.1HW04 Hardware Support for Models S4016 S5032 S6032
              8.1.SOV39         20-Sep-11 17:36    obsolete   McAfee Firewall Enterprise 8.1.SOV39 McAfee Firewall Enterprise Alternate Anti-Virus Engine Version 4.64 Update.
              8.1.2             20-Sep-11 17:52    obsolete   McAfee Firewall Enterprise 8.1.2 Maintenance Release
              8.1.2P01          20-Sep-11 18:03    obsolete   McAfee Firewall Enterprise 8.1.2P01 8.1.2 Patch 01, Maintenance
              8.1.SOV40         20-Sep-11 17:37    obsolete   McAfee Firewall Enterprise 8.1.SOV40 McAfee Firewall Enterprise Alternate Anti-Virus Engine Version 4.66 Update.
              8.1.SOV41         20-Sep-11 17:39    obsolete   McAfee Firewall Enterprise 8.1.SOV41 McAfee Firewall Enterprise Alternate Anti-Virus Engine Version 4.66 Update.
              8.2.0             23-Sep-11 15:53    installed  McAfee Firewall Enterprise 8.2.0 Certification and IPv6 Improvements
              8.2.SOV43         09-Jan-12 16:46    loaded     McAfee Firewall Enterprise 8.2.SOV43 McAfee Firewall Enterprise Alternate Anti-Virus Engine Version 4.72 Update.
              8.2.1             28-May-12 19:16    installed  McAfee Firewall Enterprise 8.2.1 MFE 8.2.1 Maintenance
              8.2.1P01          11-Jun-12 13:43    loaded     McAfee Firewall Enterprise 8.2.1P01 General Maintenance
              HZKWSG-EJ10:Admn {2} %

              Slidel, we've tried to disable the AV and it´s clear the memory usage goes highly down but this is not a solution.

              Some more memory usage info:


              HZKWSG-EJ10:User {14} % df -h
              Filesystem       Size    Used   Avail Capacity  Mounted on
              /dev/mfid0s3a    155M     37M    105M    26%    /
              devfs            1.0K    1.0K      0B   100%    /dev
              /dev/mfid0s4h    1.9G    1.0G    763M    58%    /home
              /dev/mfid0s3e    2.8G    1.0G    1.5G    41%    /secureos
              /dev/mfid0s4d    248M     10K    228M     0%    /tmp
              /dev/mfid0s3d    989M    281M    629M    31%    /usr
              /dev/mfid0s4e     52G    4.9G     43G    10%    /var
              /dev/mfid0s4f    177G    8.7G    155G     5%    /var/log
              /dev/mfid0s4g    140G    1.1G    128G     1%    /var/spool
              /dev/mfid0s1a    2.9G    1.7G    989M    64%    /vcdrom
              HZKWSG-EJ10:User {15} %

              • 4. Re: System memory usage question

                As sliedl mentioned the best command for looking at memory usage is the "top" command.


                The df -h output just shows disk usage which, to me, looks OK.