CP relevant issues script

the_rock — Wed, 21 Jan 2026 16:21:57 GMT

This script generated generic issues on your Gaia gw. Please make sure to run dos2unix and chmod 777 on it before running it.

lax example:

[Expert@CP-GW:0]# ./cp_relevant_issues.sh
Check Point Relevant Issues Report
Generated: Mon Jan 19 15:11:37 EST 2026
Host: CP-GW
Report: /var/log/cp_issue_report/CP-GW_issues_20260119_151137.txt

===================================================================
1) System sanity (disk/memory/cpu/route)
===================================================================

---- Uptime + load
$ uptime
15:11:37 up 21 days, 6:07, 1 user, load average: 0.13, 0.17, 0.16

---- IP + default route
$ ip -br addr show; echo; ip route show default || true
Option "-br" is unknown, try "ip -help".

default via 172.16.10.1 dev eth0 proto 7
2.3.4.0/29 dev eth1 proto kernel scope link src 2.3.4.5
172.16.10.0/24 dev eth0 proto kernel scope link src 172.16.10.249
172.31.10.0/24 dev eth2 proto kernel scope link src 172.31.10.249
172.31.11.0/24 dev eth2.100 proto kernel scope link src 172.31.11.249

---- Disk usage (flagging >= 90%)
Filesystem Size Used Avail Use% Mounted on
/dev/mapper/vg_splat-lv_current 50G 13G 38G 26% /
/dev/sda2 283M 39M 230M 15% /boot
/dev/mapper/vg_splat-lv_log 50G 9.5G 41G 19% /var/log
tmpfs 7.6G 30M 7.5G 1% /dev/shm
tmpfs 7.6G 0 7.6G 0% /dev/shm_huge
cgroup 7.6G 0 7.6G 0% /sys/fs/cgroup

---- Memory
$ free -m 2>/dev/null || vmstat -s 2>/dev/null || true
total used free shared buff/cache available
Mem: 15364 6641 4097 41 4625 7551
Swap: 8191 0 8191

---- Top CPU processes (snapshot)
$ ps -eo pid,user,%cpu,%mem,etime,cmd --sort=-%cpu | head -n 20
PID USER %CPU %MEM ELAPSED CMD
12584 admin 6.7 18.8 21-06:06:25 fwk
13289 admin 0.6 1.3 21-06:06:20 cpd
15304 admin 0.6 0.1 21-06:05:10 wsdnsd
14250 admin 0.2 0.0 21-06:06:13 lpd
11769 admin 0.1 0.0 21-06:06:32 /bin/redis-server 127.0.0.1:6379
11888 admin 0.1 0.1 21-06:06:31 /usr/bin/redis-cluster-server 127.0.0.1:6380
11891 admin 0.1 0.2 21-06:06:31 /opt/CPsuite-R82/fw1/Python/bin/python3.11 /bin/celery -A taskmanager.taskManager.celery worker --loglevel=info --pidfile /tmp/celery.pid --logfile /var/log/celery.log --concurrency 2
12525 admin 0.1 0.0 21-06:06:26 /opt/CPshrd-R82/bin/cpwd
13152 admin 0.1 0.2 21-06:06:21 cpview_api_service
13563 admin 0.1 1.5 21-06:06:19 fwd
15797 admin 0.1 0.6 21-06:05:06 vpnd 0
15799 admin 0.1 0.5 21-06:05:06 iked 0
15801 admin 0.1 0.5 21-06:05:06 iked 1
15803 admin 0.1 0.5 21-06:05:06 iked 2
1 admin 0.0 0.0 21-06:07:17 init [3]
2 admin 0.0 0.0 21-06:07:17 [kthreadd]
3 admin 0.0 0.0 21-06:07:17 [rcu_gp]
4 admin 0.0 0.0 21-06:07:17 [rcu_par_gp]
6 admin 0.0 0.0 21-06:07:17 [kworker/0:0H-ev]

===================================================================
2) Check Point process / daemon health (cpwd_admin)
===================================================================

---- cpwd_admin monitor_list
$ cpwd_admin monitor_list
cpwd_admin:
APP FILE_NAME NO_MSG_TIMES LAST_MSG_TIME
MSGD MSGD_13202_5686.mntr 0/6 [15:11:25] 19/1/2026
CPD CPD_13289_5714.mntr 0/10 [15:11:05] 19/1/2026
WSDNSD WSDNSD_15304_12798.mntr 0/6 [15:11:26] 19/1/2026
dlpu dlpu_15321_12842.mntr 0/6 [15:11:27] 19/1/2026
dlpu dlpu_15318_12837.mntr 0/6 [15:11:27] 19/1/2026
dlpu dlpu_15315_12834.mntr 0/6 [15:11:28] 19/1/2026
vpnd vpnd_15797_13177.mntr 0/6 [15:10:49] 19/1/2026
vpnd vpnd_15799_13179.mntr 0/6 [15:10:47] 19/1/2026
vpnd vpnd_15801_13180.mntr 0/6 [15:11:14] 19/1/2026
vpnd vpnd_15803_13182.mntr 0/6 [15:11:16] 19/1/2026
TOPOD TOPOD_15874_13519.mntr 0/6 [15:11:23] 19/1/2026
UPRD UPRD_15882_13524.mntr 0/6 [15:11:19] 19/1/2026

---- cpwd_admin monitor_list (potentially bad lines)
$ cpwd_admin monitor_list
(no matches)

===================================================================
3) ClusterXL / HA health (cphaprob / cpstat ha)
===================================================================

---- cphaprob state (member states)
$ cphaprob state

HA module not started.

This gateway not configured as cluster

---- cphaprob stat (roles/active/standby detail)
$ cphaprob stat

HA module not started.

This gateway not configured as cluster

---- cphaprob list (pnotes in problem state summary)
$ cphaprob list

HA module not started.

---- cphaprob -l list (full pnotes list)
$ cphaprob -l list

HA module not started.

---- cphaprob -a if (ClusterXL interface status)
$ cphaprob -a if

HA module not started.

Warning: Sync will not function since there aren't any sync(secured) interfaces

---- cphaprob syncstat (sync status/statistics)
$ cphaprob syncstat

HA module not configured.

---- cphaprob show_failover (last 10 events if supported)
$ cphaprob -l 10 show_failover || cphaprob show_failover

Cluster failover count:
Failover counter: 0
Time of counter reset: Mon Dec 29 09:05:15 2025 (reboot)

Cluster failover history (last 10 failovers since reboot/reset on Mon Dec 29 09:05:15 2025):

No. Time: Transition: CPU: Reason:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

No failover was detected since last reboot/reset

---- cpstat ha -f all
$ cpstat ha -f all
No product has flag 'ha'
[WARN] Command failed (rc=1)

===================================================================
4) OS/platform indicators (sensors, version, etc.)
===================================================================

---- clish: show version all
$ clish -c 'show version all' || true
Product version Check Point Gaia R82
OS build 777
OS kernel version 4.18.0-372.9.1cpx86_64
OS edition 64-bit

---- cpstat os -f all
$ cpstat os -f all

Product Name: SVN Foundation
SVN Foundation Major Version: 9
SVN Foundation Minor Version: 9
SVN Foundation Service Pack: 8
SVN Foundation Version String: R82
SVN Foundation Build Number: 998000729
SVN Foundation Status code: 0
SVN Foundation Status short: OK
SVN Foundation Status long: OK
OS Name: Gaia
OS Major Version: 4
OS Minor Version: 18
OS Build Number: -
OS SP Major: -
OS SP Minor: -
OS Version Level:
Appliance SN:
Appliance Name: Standard PC (i440FX + PIIX, 1996)
Appliance Manufacturer: Other

Interface configuration table
------------------------------------------------------------------------------------
|Name |Address |Mask |MTU |State|Mac Address |Description |
------------------------------------------------------------------------------------
|lo | 127.0.0.1| 255.0.0.0|65536| 1| |Not supported|
|eth0 |172.16.10.249| 255.255.255.0| 1500| 1|50-01-00-06-00-00|Not supported|
|eth1 | 2.3.4.5|255.255.255.248| 1500| 1|50-01-00-06-00-01|Not supported|
|eth2 |172.31.10.249| 255.255.255.0| 1500| 1|50-01-00-06-00-02|Not supported|
|eth2.100|172.31.11.249| 255.255.255.0| 1500| 1|50-01-00-06-00-02|Not supported|
------------------------------------------------------------------------------------

Routing table
---------------------------------------------------
|Destination|Mask |GateWay |Interface|
---------------------------------------------------
| 0.0.0.0| 0.0.0.0|172.16.10.1|eth0 |
| 2.3.4.0|255.255.255.248| 0.0.0.0|eth1 |
|172.16.10.0| 255.255.255.0| 0.0.0.0|eth0 |
|172.31.10.0| 255.255.255.0| 0.0.0.0|eth2 |
|172.31.11.0| 255.255.255.0| 0.0.0.0|eth2.100 |
---------------------------------------------------

Total Virtual Memory (Bytes): 24700465152
Active Virtual Memory (Bytes): 8192765952
Total Real Memory (Bytes): 16110534656
Active Real Memory (Bytes): 8192765952
Free Real Memory (Bytes): 7917768704
Memory Swaps/Sec: -
Memory To Disk Transfers/Sec: -
CPU User Time (%): 1
CPU System Time (%): 1
CPU Idle Time (%): 99
CPU Usage (%): 2
CPU Queue Length: -
CPU Interrupts/Sec: 242
CPUs Number: 16
Disk Servicing Read\Write Requests Time: -
Disk Requests Queue: -
Disk Free Space (%): 74
Disk Total Free Space (Bytes): 39883075584
Disk Available Free Space (Bytes): 39883075584
Disk Total Space (Bytes): 53676605440

Processors load
---------------------------------------------------------------------------------
|CPU#|User Time(%)|System Time(%)|Idle Time(%)|Usage(%)|Run queue|Interrupts/sec|
---------------------------------------------------------------------------------
| 1| 0| 0| 100| 0| ?| 47429|
| 2| 0| 0| 100| 0| ?| 47429|
| 3| 11| 6| 83| 17| ?| 47429|
| 4| 8| 5| 87| 13| ?| 47431|
| 5| 5| 2| 93| 7| ?| 47428|
| 6| 30| 8| 62| 38| ?| 47428|
| 7| 1| 2| 97| 3| ?| 47428|
| 8| 17| 3| 80| 20| ?| 47428|
| 9| 0| 0| 100| 0| ?| 47426|
| 10| 0| 0| 100| 0| ?| 47426|
| 11| 0| 0| 100| 0| ?| 47426|
| 12| 0| 0| 100| 0| ?| 47428|
| 13| 0| 0| 100| 0| ?| 47428|
| 14| 0| 0| 100| 0| ?| 47428|
| 15| 0| 0| 100| 0| ?| 47429|
| 16| 0| 0| 100| 0| ?| 47429|
---------------------------------------------------------------------------------

Partitions space
-----------------------------------------------------------------------------------------------------------------
|Partition|Size (bytes)|Used (bytes)|Free total (bytes)|Free total (%)|Free available (bytes)|Free available (%)|
-----------------------------------------------------------------------------------------------------------------
|/ | 53676605440| 13793529856| 39883075584| 74| 39883075584| 74|
|/boot | 296236032| 40203264| 256032768| 86| 240304128| 81|
|/var/log | 53676605440| 10182656000| 43493949440| 81| 43493949440| 81|
-----------------------------------------------------------------------------------------------------------------

System Time: 1768853498
System Start Time: 1767017059

---- cpstat os -f sensors (if supported)
$ cpstat os -f sensors || true

===================================================================
5) Recent log scan (last ~200 lines + keyword match)
===================================================================

---- /var/log/messages (tail 200 + keyword scan)
(no keyword hits in last 200 lines)

---- /var/log/dmesg (tail 200 + keyword scan)
170:[ 14.659456] udevd (658): /proc/658/oom_adj is deprecated, please use /proc/658/oom_score_adj instead.

---- /opt/CPsuite-R82/fw1/log/fwd.elg (tail 200 + keyword scan)
(no keyword hits in last 200 lines)

---- /opt/CPsuite-R82/fw1/log/vpnd.elg (tail 200 + keyword scan)
(no keyword hits in last 200 lines)

===================================================================
6) Core dumps / crash artifacts (if any)
===================================================================

---- Look for common crash/core files (best-effort)
$ ls -lah /var/log/core* /var/log/crash* /var/log/dump* /var/crash/* 2>/dev/null || true
/var/log/crash:
total 12K
drwxr-xr-x 2 admin root 6 Apr 9 2025 .
drwxr-xr-x 50 admin root 8.0K Jan 19 15:09 ..

/var/log/dump:
total 12K
drwxr-xr-x 3 admin root 22 Apr 9 2025 .
drwxr-xr-x 50 admin root 8.0K Jan 19 15:09 ..
drwxr-xr-x 2 admin root 6 Oct 11 2024 usermode

===================================================================
7) Summary (Potential issues)
===================================================================
[ATTENTION] Potential issues detected:
1) Log keyword scan found potential issues in one or more logs (see section 5).

Report saved: /var/log/cp_issue_report/CP-GW_issues_20260119_151137.txt
[Expert@CP-GW:0]#

topic CP relevant issues script in Scripts

CP relevant issues script