Support Center > Search Results > SecureKnowledge Details
Security Gateway in Monitor Mode with enabled SecureXL might freeze intermittently
Symptoms
  • Security Gateway configured in Monitor Mode (per sk101670) with enabled SecureXL might freeze intermittently (no access to console, only cold reboot helps).

  • SmartView Monitor and output of "cat /proc/meminfo" command show that memory consumption increases over time.

  • Output of "cat /proc/slabinfo" command shows huge amount of active skb.

    Example:

    skbuff_head_cache            2904067 2907510   ... slabdata  193834  193834     22
    skb_managed_shinfo_cache     2904237 2907852   ... slabdata  242321  242321      0
    skb_managed_data_cache_4096        2       2   ... slabdata       2       2      0
    skb_managed_data_cache_2048  2903838 2905798   ... slabdata 1452899 1452899      0
    skb_managed_data_cache_1024        0       0   ... slabdata       0       0      0
    skb_managed_data_cache_256       333     432   ... slabdata      27      27     59
    skbuff_fclone_cache               26      28   ... slabdata       4       4      0
    
  • /var/log/messages file repeatedly shows that prior to the freeze, Linux Out-of-Memory mechanism was killing multiple processes.

    Examples:

    • kernel: <NAME_OF_PROCESS> invoked oom-killer: ...
      kernel: 
      kernel: Call Trace: 
      kernel: out_of_memory: trying to free memory using oom_notify_list 
      kernel: [<...>] out_of_memory+0x...
      kernel: [<...>] __alloc_pages+0x...
      kernel: [<...>] read_swap_cache_async+0x...
      kernel: [<...>] __handle_mm_fault+0x...
      kernel: [<...>] do_page_fault+0x...
      kernel: [<...>] do_mmap_pgoff+0x...
      kernel: [<...>] error_exit+0x...
      
    • kernel: <NAME_OF_PROCESS> invoked oom-killer: ...
      kernel: 
      kernel: Call Trace:
      kernel: out_of_memory: trying to free memory using oom_notify_list
      kernel: [<...>] out_of_memory+0x...
      kernel: [<...>] autoremove_wake_function+0x...
      kernel: [<...>] __alloc_pages+0x...
      kernel: [<...>] read_swap_cache_async+0x...
      kernel: [<...>] swapin_readahead+0x...
      kernel: [<...>] __handle_mm_fault+0x...
      kernel: [<...>] _atomic_dec_and_lock+0x...
      kernel: [<...>] do_page_fault+0x...
      kernel: [<...>] error_exit+0x...
      
Cause

Possible memory leak in SecureXL SIM module related to the integration with the Bridge driver.


Solution
Note: To view this solution you need to Sign In .