Hello!
I need your help with some doubts about how to clear the swap cache or swap usage?, i tried to do a linux proceding with the the swapoff -a && swapon -a command but no works on XG, this because fstab directory not exists.
Waiting for your early reply
Best regards!
Hello Adytia,
The situation of cleaning the swap cache is due to the fact that our firewall is currently using 95 to 98% RAM and SWAP and it has generated faults in the operation of the virtual appliance.
Here is an image of the swap resources used:
a few days ago, we disabled IPS, Antivirus, Hotspot and Web Server protection Services, but there were no changes, and this shows me too much postgres processes that i known it used by snort.
Waiting for your early reply.
Hello Enzo,
The swap memory consumed is normal and if you have started using IPS then the memory consumption would also increase which is well within expectation. As per the usage on the system the SWAP, total memory and most of your memory is cached.
The image is from a XG firewall with no load and has configured for 2 GB ram. There will be no performance impact and the memory is reserved. As your memory is higher the amount of free memory is less and but they are mostly cached/reserved.
The ram management has changed since Cyberoam as in Cyberoam the amount of free RAM will directly conclude the capacity of the machine. when reached 90 to 100% performance issue is observed. In SFOS it is completely different the amount of RAM is reserved at the start and used for your resources when needed. If the system is acting up you may check the RAM impact as the " 0.0%wa," would indicate the amount of process awaits to be processed. Ideally 0 but would be normal >1.0 or 2.0 depending on the model.
Adytia
First of all, thank you for the reply and the documentation, it really helps me to understand how Sophos XG manage the system resources. But i have some doubts that Why WebGUI alerting this as a negative output.
Adytia,
Adding this, the IPS service and other too, here's the output of the System service status:
That's my doubts are generated related to the utilization resources, because they were disabled.
Waiting for your early reply.
Thanks for all help!
Best Regards
Hello Enzo,
It does seem that some process is causing high utilization on your SWAP memory, could you please check go to atop and press S and check which process is taking the most of the cpu and also check by pressing p and check at that time which process is taking high swap memory.
We suspect the issue could be with one of these process, also could you please let us know if you are on the latest version?
Aditya,
Here's the ouput from atop
The current firmware versión is 17.1.4-MR4, applied about 3 weeks ago.
