NSA 3600 Memory Leak / Slowdown / Rebooting By Itself...
LJ_Tech
Newbie ✭
I have an NSA 3600, I have been getting random reboots, but maybe they aren't so random. It seems like something is causing the web interface to keep refreshing itself when I am logged in and it gets worse and worse, you can't make any config changes, and then eventually the unit reboots and everything works until it starts happening again. Does anyone know what could be causing this??
Category: High End Firewalls
0
Answers
First of all, please make sure that you're on the latest general release that is 6.5.4.7.
Also, while this issue takes place, are you able to access it using SSH? If yes, TSR collected during the time of the issue can definitely reveal some information as to what could be going on.
Thanks!
Shipra Sahu
Technical Support Advisor, Premier Services
I am on firmware 6.5.4.7-83n, which I think is the latest. I've never tried to SSH into the sonicwall to be honest. I assume you mean to SSH in when it starts the refreshing thing when trying to config a static DHCP entry or whatnot? Also, is there a way to check the system log to see what happened if anything before reboot? The log seems to get cleared on every reboot.
Thanks!
From the trace log I see this:
01/05 09:03:49.752: CRITICAL - RAM exhaustion: Sys Max Block 262128 (threshold 262144)
01/05 09:03:51.768: reboot - 01/05/2021 09:03:51.752: low memory condition, 262128 max block size
01/05 09:03:51.768: reboot - *** software watchdog reboot ***
Now, how do we determine what process is eating the memory?
Also seeing this in there.
01/05 10:08:50.880: CRITICAL - Informational: httpServer:3469:
01/05 10:08:50.880: CRITICAL - readHdrs: get a socket error, erro number: 0
Here is the trace log after fresh reboot.
How do I fix these errors?
Hello @LJ_TECH - this is the type of issue which is best solved in a support case. Let me give you some details about what data to gather from your firewall, which can be given to case owner for analysis.
CLASSIC MODE
Please generate:
1) a tech support report from the SonicWALL's System > Diagnostic screen, including all checkboxes except Sensitive Keys,
2) an exported settings file from SonicWALL's System > Settings screen,
3) tracelogs (Last, All + Current) from the SonicWALL's Internal Settings screen (via diag.html)
4) an exported TXT and CSV log from the Log > Log Monitor screen
5) any console log data
Zip them up, then attach to the case itself.
@LJ_Tech,
I agree with @John_Lasersohn. It would be best to handle this over a support case. Kindly attach the data as mentioned by him and our support team will further analyze the cause of this issue.
Thanks!
Shipra Sahu
Technical Support Advisor, Premier Services
I don't see a way to submit a case. But this seems like a firmware bug that I would like to get fixed. I've got all the files ready to go. Please advise. Last night before I left the office, I checked the memory usage and it was at 31%, which is normal after a fresh reboot. This morning when I got into the office, I checked and it was at 72% and the web GUI was refreshing itself every 10-15 seconds when I would log in. I extracted all the log files requested and then manually rebooted it. Back to 31% and normal operation.
@LJ_Tech You have to submit the support case through mysonicwall.com, browse to Resources & Support \ Support and click Create Case.
I had a similar issue with an NSa 3650 where the firewall would reboot itself while handling high volume of SSLVPN traffic. Users would be unable to login to SSLVPN and the WebUI would become unusable until it rebooted itself. This was resolved with firmware 6.5.4.6 though.
I've still got this issue. If anyone has any hints, it would be much appreciated.
Try a different web browser and open a support case. If you do not have a valid support license than I would suggest factory defaulting the unit and rebuilding from scratch.