Re: [fw-wiz] RE: Firewall Utilization

From: Achim Dreyer (adreyer@math.uni-paderborn.de)
Date: 10/16/02 

From: Achim Dreyer <adreyer@math.uni-paderborn.de>
To: "Zill, Greg" <Greg.Zill@owh.com>
Date: Wed Oct 16 13:33:18 2002

On Wed, 16 Oct 2002, Zill, Greg wrote:

> Date: Wed, 16 Oct 2002 09:55:42 -0500
> From: "Zill, Greg" <Greg.Zill@owh.com>
> To: firewall-wizards@honor.icsalabs.com
> Subject: [fw-wiz] RE: Firewall Utilization
>
> Sun e250 with Solaris 2.7
> Raptor 6.5.3sp1
> dual 368 CPU, 512 RAM, 1024 swap, 18Gb SCSI
> two bonded t-1 lines
>
> uptime common: 0.05 0.05 0.05

.. these are usually load averages for user space processes. The load
average can at best be an indicator that something is terribly wrong.
You should never trust them.

All major firewall implementations work at kernel level, so these are not
accounted for with the load level! If you want to see what the kernel is
doing go for kernel optimisation tools..

Regards,
Achim Dreyer

---------------------------------------------------------------------------
A. Dreyer, Senior SysAdmin (UNIX & Network) / Internet Security Consultant

Relevant Pages

  • Re: Dynamically loading binaries in Kernel mode.
    ... Allocate kernel level memory that is big enough to ... receive the binary image of the dynamic code ... Load the code into memory. ...
    (microsoft.public.development.device.drivers)
  • Re: Dynamically loading binaries in Kernel mode.
    ... Allocate kernel level memory that is big enough to ... receive the binary image of the dynamic code ... Load the code into memory. ...
    (microsoft.public.development.device.drivers)
  • Re: Very high load on P4 machines with 2.4.28
    ... the machine with the highest load average is the ... a load of 0.75, pushing out 14Mbit/s. ... > increases your wait I/O time in this particular application. ... nothing that would suggest such change, but then I'm not a kernel hacker, I ...
    (Linux-Kernel)
  • Re: Dynamically loading binaries in Kernel mode.
    ... Right now only the kernel will load ... Windows 2k/XP/2k3 Filesystem and Driver Consulting ...
    (microsoft.public.development.device.drivers)
  • Xorg xserver blank using one kernel, but ok using another
    ... because xorg.conf is the same whether it's runinng under Xen or a normal kernel. ... The main difference beteween the blank screen and the ok screen is that when the display works, I get "VESA VBE DDC supported" but when it goes blank I get "VESA VBE DDC not supported". ... # This file was generated by dexconf, the Debian X Configuration tool, using ... Load "bitmap" ...
    (Debian-User)