Lesson Learned – Enable core dumps

School of Hard Knocks.

Put this into your install procedures. Enable core dumps so that when your firewall starts rebooting magically at 1am, you don’t have to go into panic mode trying to figure out how to get a core dump for analysis. If you do this now you will save about 24 hours of your life (and sleep).

No impact on reliability or performance. Works on SPLAT and GAIA:

========== OS level core dump ===========================

#add crashkernel=64M@16M to grub.conf

#chkconfig --level 3 kdump on

sk44186 – Enable generation of kernel core dump file on Check Point Security Gateway on SecurePlatform / Gaia running R7x

============ USER level core dump ===================

To get a USER level core dump check out this command:

# um_core enable or #ulimit -c unlimited

sk18307 – Enabling the generation of User Mode core dump files on SecurePlatform OS

This should be enabled by default but it is not.

dreez

Advertisements
Post a comment or leave a trackback: Trackback URL.

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

blog.lachmann.org

Michael Endrizzi's - St. Paul MN - CheckPoint blog on topics related to Check Point products and security in general.

%d bloggers like this: