Swap memory of a PA-5450 series firewall is fully utilized
2106
Created On 09/24/24 07:29 AM - Last Modified 07/01/25 13:34 PM
Symptom
- The swap memory on the PA-5450 series firewall is full (100% utilization).
- There is no indication of a memory leak.
- System functionality and performance is not impacted.
- System resource output shows 0.0 free swap memory:
> show system resources
Top - 18:02:25 up 210 days, 6:30, 1 user, load average: 1.02, 1.25, 1.25 Tasks: 471 total, 3 running, 468 sleeping, 0 stopped, 0 zombie %Cpu(s): 3.5 us, 1.5 sy, 0.0 ni, 94.6 id, 0.0 wa, 0.0 hi, 0.0 si, 0.0 st MiB Mem : 63741.1 total, 4178.2 free, 10473.6 used, 49094.7 buff/cache MiB Swap: 1023.9 total, 0.0 free, 1023.9 used. 55159.1 avail Mem
Environment
- PA-5450
- Any PAN-OS version
Cause
The swap memory is reserved for the MP Linux kernel and does not impact user traffic.
Only a small amount of swap space is allocated (1GB), despite having plenty of free memory (55GB).
Resolution
- This behavior is by design and expected.
- The “avail Mem” number should be used to identify if the device is low on memory as it represents the best estimate of free/buffered/cached memory that can still be utilized.