This message indicates that the process is unable to find a large enough block of contiguous memory. The IP Input process attempts to get 1028 bytes from the processor pool of memory, as shown in this example:
%SYS-2-MALLOCFAIL: Memory allocation of 1028 bytes failed from 0x601617A4, pool Processor, alignment 0 -Process= "IP Input", ipl= 2, pid= 21
These are the causes of these messages:
The memory in the router is insufficient to support the Cisco IOS® Software or the size of the routing table.
A memory leak occurs.
The memory becomes fragmented.
Note: The Blaster and Nachi Worms can lead to memory problems.
If the %SYS-2-MALLOCFAIL messages are logged, perform these steps:
Verify that the router has enough DRAM to support the Cisco IOS Software by issuing the show version command, as shown in this example:
Router#show version Cisco Internetwork Operating System Software IOS (tm) C2600 Software (C2600-I-M), Version 12.2(8)T5, RELEASE SOFTWARE (fc1) TAC Support: Copyright (c) 1986-2002 by Cisco Systems, Inc. Compiled Fri 21-Jun-02 08:50 by ccai Image text-base: 0x80008074, data-base: 0x80A2BD40 ROM: System Bootstrap, Version 12.2(7r) [cmong 7r], RELEASE SOFTWARE (fc1) morannon uptime is 5 days, 1 hour, 27 minutes System returned to ROM by power-on System image file is "flash:c2600-i-mz.122-8.T5.bin" Cisco 2620XM (MPC860P) processor (revision 0x100) with 28672K/4096K bytes of memory. Processor board ID JAD071008B1 (1020186390)
The items in bold show that the router is running Cisco IOS Software release 12.2(8)T5 with the I feature set (C2600-I-M). In addition, it has 32 MB of DRAM (28672K/4096K).
Verify the minimum memory requirements for Cisco IOS Software, such as the platform, train and feature set. To check the minimum memory requirements for Cisco IOS Software, perform show version analysis by cutting and pasting the command output in the Output Interpreter tool. Follow the link provided in the Cisco IOS Image Software Advisor-IOS Image Name section of the analysis output.
Verify that the minimum recommended amount of DRAM is installed on the router. A large routing table requires more than the minimum DRAM requirements.
The Cisco series 2600, 3600 and 3700 routers require a minimum amount of I/O memory to support certain interface processors.
If the amount of installed memory is less than the recommended amount, perform one of these options:
Go to the Cisco IOS Software version supported with the current amount of memory.
Some applications have features, such as the User Tracking (UT) Discovery feature of CiscoWorks, which can result in low memory conditions unless the ip cef command is issued.
Memory allocation failures can be caused by a memory leak bug or memory fragmentation. In this case, analyze the output of the show memory command by pasting the output into the Output Interpreter tool.
To determine if fragmentation is occurring, compare the Largest and Free fields by issuing the show memory [summary] command.
Fragmentation is taking place if the number in the Largest field is much smaller than the number in the Free field. This is because the Largest field indicates the largest contiguous free memory block and it should normally be close to the free memory, as shown in this example:
Total is the total memory allocated to the processor or I/O memory. This does not include the amount of memory taken up by the Cisco IOS Software.
Used is the amount of memory being used at the time the show memory [summary] command is issued.
Free is the amount of available free memory at the time the show memory [summary] command is issued.
Lowest is the lowest amount of memory available since the last reload.
Largest is the largest amount of free contiguous memory at the time the show memory [summary] command is issued. This should normally be close to the free memory. A small number compared to the free memory indicates fragmentation.
To determine if a memory leak is occurring, capture the output of the show memory [summary] command several times at regular intervals. The intervals depend on the length of time it takes for the memory allocation failures to appear. If the router begins to display the errors after four days, then one or two captures per day is sufficient to establish a pattern.
If the free memory steadily decreases, a memory leak may be occurring.
A memory leak occurs when a process takes and uses memory, but does not release the memory back to the system. To determine the offending process, issue the show processes memory command and perform these steps:
To determine which process is not freeing memory back to the system, capture the show processes memory command output several times at regular intervals.
The two counters used for this capture are Freed and Holding. If the Holding counter for a process increases, but the Freed counter does not increase, that process may be the cause of the memory leak.
Once the process is identified, search for a memory leak issue by referring to the Bug Toolkit. This issue relates to the process that affects the Cisco IOS Software currently installed on the router.
Note: The Blaster and Nachi Worms can lead to memory problems.
To determine if your problem could be related to these worms, refer to these documents:
Now, I'm a sysadmin. I believe in DevOps, love to automate. I've been relying on Cisco for almost two decades for what I've seen as simple networking - and in the last 10 years that just probably means "predictable", or something I'm used to. It works. I'...
Hey Guys,going to Upgrade the IOS Version on a bunch of Cisco ME-3600X Switches soon.They haven't been upgraded in a while, so I just wanted to ask for some experience in the field.Will be going from 15.4(3)S2 to 15.6(2)SP8.The fact that two ima...
Hi, I have a Cisco ASR 9010 Router and I want to configure BGP BlackHole.I want to know about the syntax that is needed to be applied in order to do this, because I am having some issues regarding BH application in IOS XR.Lets say that I want to appl...
I have a Cisco C2960 in production which was compromised. The switch has been pulled and I'm trying to determine if the IOS image was tampered with. Since the switch is End-of-Life / End-of-Support, I'm unable to get from Cisco what the hash is to va...