topic Re: VSX error on /var/log/messages in Firewall and Security Management

VSX error on /var/log/messages

KostasGR — Mon, 02 Aug 2021 08:40:55 GMT

Hello

We are observing repetitively the below errors on VSX gateway /var/log/messages

Aug 2 08:23:06 2021 XXXXX monitord[849]: Time shift detected !!!
Aug 2 08:23:06 2021 XXXXX kernel: [SIM4];sim_cphwd_stats_cb: failed to create cpaq buffer
Aug 2 08:23:08 2021 XXXXX kernel: [SIM4];sim_cphwd_stats_cb: failed to create cpaq buffer

Any ideas?

BR,
Kostas

Re: VSX error on /var/log/messages

G_W_Albrecht — Mon, 02 Aug 2021 09:54:20 GMT

Which version & Jumbo Take is installed ? The error message "sim_cphwd_stats_cb: failed to create cpaq buffer flood" could be related to a known memory leak, which is resolved in a jumbo take - e.g. R80.30 JT 191 resolved it for R80.30. The real issue apart from errors in var/log/messages is that SecureXL ceases to work, so there is no acceleration on device...

Re: VSX error on /var/log/messages

KostasGR — Mon, 02 Aug 2021 10:39:52 GMT

Hello G_W_Albrecht

The version of VSX is r80.30 with JHF take 210.

BR,
Kostas

Re: VSX error on /var/log/messages

G_W_Albrecht — Mon, 02 Aug 2021 14:55:03 GMT

So i would suggest to contact TAC to resolve this issue !

Re: VSX error on /var/log/messages

Thomas_Eichelbu — Tue, 02 Aug 2022 14:20:55 GMT

Hello,

wow exactly ONE YEAR after the first post of this message the problem struck us too:

Aug 2 14:27:36 2022 XXXXXXXXXXXXX kernel: [SIM4];cpaq_cbuf_send: cpaq_cbuf_call_api_end_ex failed
Aug 2 14:27:36 2022 XXXXXXXXXXXXX kernel: [SIM4];cpaq_cbuf_send_buffer: send chunk num 8 failed
Aug 2 14:27:36 2022 XXXXXXXXXXXXX kernel: [SIM4];sim_cphwd_stats_cb: failed to create cpaq buffer
Aug 2 14:27:36 2022 XXXXXXXXXXXXX kernel: [SIM4];ERROR: [sxl0]dos_q_send_notification (dos_q.c:128): cpaq_client_job_end=1
Aug 2 14:27:36 2022 XXXXXXXXXXXXX kernel: [SIM4];ERROR: [sxl0]dos_pkt_nt_drop_deny_list (dos_pkt.c:309): dos_q_send_notification failed
Aug 2 14:27:37 2022 XXXXXXXXXXXXX kernel: [SIM4];ERROR: [sxl0]dos_q_send_notification (dos_q.c:128): cpaq_client_job_end=1
Aug 2 14:27:37 2022 XXXXXXXXXXXXX kernel: [SIM4];ERROR: [sxl0]dos_pkt_nt_drop_deny_list (dos_pkt.c:309): dos_q_send_notification failed
Aug 2 14:27:38 2022 XXXXXXXXXXXXX kernel: [SIM4];cpaq_cbuf_send: cpaq_cbuf_call_api_end_ex failed
Aug 2 14:27:38 2022 XXXXXXXXXXXXX kernel: [SIM4];cpaq_cbuf_send_buffer: send chunk num 0 failed
Aug 2 14:27:38 2022 XXXXXXXXXXXXX kernel: [SIM4];sim_cphwd_stats_cb: failed to create cpaq buffer
Aug 2 14:27:40 2022 XXXXXXXXXXXXX kernel: [SIM4];cpaq_cbuf_send: cpaq_cbuf_call_api_end_ex failed
Aug 2 14:27:40 2022 XXXXXXXXXXXXX kernel: [SIM4];cpaq_cbuf_send_buffer: send chunk num 0 failed
Aug 2 14:27:40 2022 XXXXXXXXXXXXX kernel: [SIM4];sim_cphwd_stats_cb: failed to create cpaq buffer
Aug 2 14:27:42 2022 XXXXXXXXXXXXX kernel: [SIM4];cpaq_cbuf_send: cpaq_cbuf_call_api_end_ex failed
Aug 2 14:27:42 2022 XXXXXXXXXXXXX kernel: [SIM4];cpaq_cbuf_send_buffer: send chunk num 0 failed

impact, the firewall became totaly stuck and needed a reboot.

Software:
R81 + Take 44
3600 in a Cluster
enabled_blades
fw vpn urlf av appi ips anti_bot mon

but no VSX on our side this time!

Re: VSX error on /var/log/messages

Thorsten_Nuellm — Tue, 04 Oct 2022 06:54:48 GMT

Hi,

we have the same problem still with a ticket, started early this year no solution yet.

we have random outages for a couple of seconds with the same error.

Oct 4 06:31:04 2022 xxxxxxxxxx kernel: [SIM4];cpaq_cbuf_send: cpaq_cbuf_call_api_end_ex failed
Oct 4 06:31:04 2022 xxxxxxxxxx kernel: [SIM4];cpaq_cbuf_send_buffer: send chunk num 0 failed
Oct 4 06:31:04 2022 xxxxxxxxxx kernel: [SIM4];sim_cphwd_stats_cb: failed to create cpaq buffer
Oct 4 06:31:06 2022 xxxxxxxxxx kernel: [SIM4];cpaq_cbuf_send: cpaq_cbuf_call_api_end_ex failed
Oct 4 06:31:06 2022 xxxxxxxxxx kernel: [SIM4];cpaq_cbuf_send_buffer: send chunk num 0 failed
Oct 4 06:31:06 2022 xxxxxxxxxx kernel: [SIM4];sim_cphwd_stats_cb: failed to create cpaq buffer
Oct 4 06:31:08 2022 xxxxxxxxxx kernel: [SIM4];cpaq_cbuf_send: cpaq_cbuf_call_api_end_ex failed
Oct 4 06:31:08 2022 xxxxxxxxxx kernel: [SIM4];cpaq_cbuf_send_buffer: send chunk num 0 failed
Oct 4 06:31:08 2022 xxxxxxxxxx kernel: [SIM4];sim_cphwd_stats_cb: failed to create cpaq buffer
Oct 4 06:31:10 2022 xxxxxxxxxx kernel: [SIM4];cpaq_cbuf_send: cpaq_cbuf_call_api_end_ex failed
Oct 4 06:31:10 2022 xxxxxxxxxx kernel: [SIM4];cpaq_cbuf_send_buffer: send chunk num 0 failed
Oct 4 06:31:10 2022 xxxxxxxxxx kernel: [SIM4];sim_cphwd_stats_cb: failed to create cpaq buffer

no VSX

Check Point 28000 Cluster

R81.10 take 335

Re: VSX error on /var/log/messages

Jan_Kleinhans — Mon, 28 Nov 2022 09:15:02 GMT

Did you found a solution for these entries ?

Re: VSX error on /var/log/messages

_Val_ — Mon, 28 Nov 2022 10:21:30 GMT

Please open a TAC case for this, @Thorsten_Nuellm

Re: VSX error on /var/log/messages

henryd111 — Mon, 28 Nov 2022 12:47:45 GMT

Try to install the last recommended jumbo HFA.

Re: VSX error on /var/log/messages

ajax — Tue, 28 Jan 2025 07:45:30 GMT

Hello! We have same trouble, but don't understand how to fix it.

Did you found solution for this trouble?

Re: VSX error on /var/log/messages

Thomas_Eichelbu — Tue, 28 Jan 2025 07:51:35 GMT

Well, check this SK
https://support.checkpoint.com/results/sk/sk180437

it could be again this ThreadBlocker feature, which leads to problem in some installations.
in the first days of this feature it caused VPN outages during policy push, disabling it helped.

and update to the most recent software version!

if all fails, reach out to TAC!

Re: VSX error on /var/log/messages

ajax — Tue, 28 Jan 2025 07:55:57 GMT

Wow, very thank you for so quick answer!!
Unfortunetaly, this SK didn't fix our trouble, we are disabled thread_blocker 5 days ago, but still have same errors..