topic Re: h_partial_key_nelem in Firewall and Security Management

h_partial_key_nelem

Arskaz — Fri, 17 Sep 2021 10:41:54 GMT

Hi!

Any ideas, what do these messages indicate at messages?

kernel: [fw4_2];h_partial_key_nelem: called for table id 399 with no index table!

Not created a case yet, but those are appearing sometimes, when also some traffic problems are seen.

BR, Arskaz

Re: h_partial_key_nelem

the_rock — Fri, 17 Sep 2021 10:45:03 GMT

I found 2 articles on support site when searching that error, but they both indicate its fixed in certain jumbo version, does not reallyt say whats causing it.

Re: h_partial_key_nelem

Arskaz — Fri, 17 Sep 2021 11:01:34 GMT

OK. I couldn't find that at all from support site 😉

Maybe expert -level is not enough...

So I assume, that it is fixed at the latest R80.30 GA JHF. Have not seen that messages with it.

Re: h_partial_key_nelem

the_rock — Fri, 17 Sep 2021 11:45:43 GMT

I think it should be enough, try below : - )

https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk160735

https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk165953

If you google your error, its first 2 links that come up.

Andy

Re: h_partial_key_nelem

G_W_Albrecht — Fri, 17 Sep 2021 12:53:31 GMT

As long as your traffic problems have gone away also, the issue is fixed 8). The cited SKs are not for [fw4_2];h_partial_key_nelem but other kernel messages - one from a GW freeze, one from a crash...

Re: h_partial_key_nelem

the_rock — Fri, 17 Sep 2021 13:04:13 GMT

Thats true, articles are not, I was just stating thats what came up when I googled it : - )

Re: h_partial_key_nelem

Tal_Paz-Fridman — Fri, 17 Sep 2021 16:53:09 GMT

Can you share exactly what version you are running (including JHF).

Thanks

Tal

Re: h_partial_key_nelem

Arskaz — Mon, 20 Sep 2021 07:38:54 GMT

R80.30Take: 236

Re: h_partial_key_nelem

Tal_Paz-Fridman — Mon, 20 Sep 2021 07:42:41 GMT

Thank you from the information.

I am taking it with the relevant R&D owners.

Re: h_partial_key_nelem

Duane_Toler — Fri, 08 Oct 2021 13:57:50 GMT

Hey,

Just wanted to add my vote to this thread. I am helping a customer with various odd issues on their R80.30 JHF 236 HA cluster. I had this same/similar message appear in fwk.elg repeatedly (every minute or two):

[8 Oct 9:37:00][fw4_0];[vs_0];h_partial_key_nelem: called for table id 466 with no index table!

[8 Oct 9:37:00][fw4_5];[vs_0];h_partial_key_nelem: called for table id 466 with no index table!

[8 Oct 9:37:56][fw4_0];[vs_0];h_partial_key_nelem: called for table id 466 with no index table!

[8 Oct 9:37:56][fw4_5];[vs_0];h_partial_key_nelem: called for table id 466 with no index table!

[8 Oct 9:39:01][fw4_0];[vs_0];h_partial_key_nelem: called for table id 466 with no index table!

[8 Oct 9:39:01][fw4_3];[vs_0];h_partial_key_nelem: called for table id 466 with no index table!

[8 Oct 9:39:18][fw4_0];[vs_0];h_partial_key_nelem: called for table id 466 with no index table!

[8 Oct 9:39:18][fw4_5];[vs_0];h_partial_key_nelem: called for table id 466 with no index table!

[8 Oct 9:41:04][fw4_0];[vs_0];h_partial_key_nelem: called for table id 466 with no index table!

[8 Oct 9:41:04][fw4_1];[vs_0];h_partial_key_nelem: called for table id 466 with no index table!

# fw tab -t 466 -s

HOST NAME ID #VALS #PEAK #SLINKS

localhost 466 466 952 1039 0

I didn't find anything in SecureKnowledge (Expert level, too), but this thread did come up (obviously).

The info below is just FYI, for how I came across the above error, to explain my environment a little more:

For this customer, I'm suspecting they have network and VPN performance issues with combination of SNDs overloaded and CoreXL being crushed due to VPN + Medium Path (QoS and IPS enabled). They have Multi-Queue NICs, but we need to re-arrange their connections to take full advantage; this is a pending task.

I have an EVAL for them right now, with 6 FWK cores configured, but some cores are hitting 99% (with others at 83% at the same time). Since it's R80.30, I notice SNDs are no longer limited as before, so we have as many SNDs as CPU cores. This gateway just needs more Multi-Queue. 🙂 R80.40 is in our plan, too.

I'm also looking at sk165853 (cpwd_q_init_ke), but I haven't done a debug yet to confirm this is related. It's in my plan, as well.

Thanks, and I hope this helps!

Re: h_partial_key_nelem

Tal_Paz-Fridman — Fri, 08 Oct 2021 16:34:21 GMT

According to R&D these messages are harmless.

We will issue an SK as well.

Tal

Re: h_partial_key_nelem

Rick_Dimmick — Wed, 29 Dec 2021 18:48:03 GMT

I am seeing these same messages in /var/log/messages, full of them! I was unable to find anything in SK but found this in Checkmates. Was an SK ever created? How do we get rid of these logs filling up the messages file?