Re: [fw1-gurus] Virtual defragmentation error: fragment table is full

[Hugo van der Kooij <hvdkooij@xxxxxxxxxxxxxxx>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

System Administrator wrote:
> We use Checkpoint FW1 R55 with ai in a cluster with rainwall.
> 
> The data throughput betweet the DMZ is very slow for the last day.
> In one of the nodes is get the following error.
> -------------------------------------------------------------------------------
> FW-1: Virtual defragmentation error: fragment table is full (xxx.xxx.xxx.xxx ->
> xxx.xxx.xxx.xxx proto 17 id 26458 len 1500 offset 17760) - 353232 fragments
> dropped during the last 60 seconds
> -------------------------------------------------------------------------------

You need to fix the path. I seems your are fragmenting packets all over
the place. That will kill your performance. So make sure there is no
need to fragment packets.

Hugo.

- --
hvdkooij@xxxxxxxxxxxxxxx               http://hugo.vanderkooij.org/
PGP/GPG? Use: http://hugo.vanderkooij.org/0x58F19981.asc

	A: Yes.
	>Q: Are you sure?
	>>A: Because it reverses the logical flow of conversation.
	>>>Q: Why is top posting frowned upon?

Bored? Click on http://spamornot.org/ and rate those images.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org

iEYEARECAAYFAkmpnVEACgkQBvzDRVjxmYFzTQCgsPLisri6jHb3bIMnIMfFVgg3
pjIAnA9pjd9ntg+AlMJK7ILV3z9dyCAD
=finy
-----END PGP SIGNATURE-----
_______________________________________________
fw1-gurus mailing list
fw1-gurus@xxxxxxxxxxxxxxxxxx
http://lists.phoneboy.com/listinfo.cgi/fw1-gurus-phoneboy.com