https://community.checkpoint.com/t5/Firewall-and-Security-Management/traffic-issues-log-flooded-with-errors/m-p/186470#M34316 <P>Good point, because more info there is before reboot for TAC investigation, the better.</P> <P>Andy</P> Fri, 14 Jul 2023 13:39:44 GMT the_rock 2023-07-14T13:39:44Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/traffic-issues-log-flooded-with-errors/m-p/186440#M34303 <P>We had some traffic issues, broken connections, slowness etc.</P> <P>/var/log/messages is flooded:</P> <P>[fw4_0];tcp_input: could not add pkt_buf to rcv queue<BR />[fw4_1];tcp_input: could not add pkt_buf to rcv queue<BR />[fw4_1];tcp_input: could not add pkt_buf to rcv queue<BR />[fw4_0];tcp_input: could not add pkt_buf to rcv queue<BR />[fw4_0];tcp_input: could not add pkt_buf to rcv queue<BR />[fw4_2];tcp_input: could not add pkt_buf to rcv queue</P> <P>Nothing found in the knowledgebase. Maybe someone has an idea?</P> <P>&nbsp;</P> <P>&nbsp;</P> Fri, 14 Jul 2023 07:47:11 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/traffic-issues-log-flooded-with-errors/m-p/186440#M34303 Wolfgang 2023-07-14T07:47:11Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/traffic-issues-log-flooded-with-errors/m-p/186458#M34308 <P>Is the gateway or interface/s showing signs of heavy load in combination with these messages?</P> Fri, 14 Jul 2023 11:18:53 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/traffic-issues-log-flooded-with-errors/m-p/186458#M34308 Chris_Atkinson 2023-07-14T11:18:53Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/traffic-issues-log-flooded-with-errors/m-p/186462#M34309 <P>No, only 250Mbit/s on a 5600 appliance. Shown messages appears all the time every second.</P> <P>We switched the active node to the other cluster member and the traffic issues are gone. On the now standby node&nbsp; /var/log/messages are still flooded with the same messages. All memory on this node is in use. Im sure a reboot solve the problem but maybe ther's something to investigate.</P> Fri, 14 Jul 2023 11:56:10 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/traffic-issues-log-flooded-with-errors/m-p/186462#M34309 Wolfgang 2023-07-14T11:56:10Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/traffic-issues-log-flooded-with-errors/m-p/186463#M34310 <P>How much RAM is it populated with (32G) and a recent JHF and how much uptime?</P> Fri, 14 Jul 2023 12:01:40 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/traffic-issues-log-flooded-with-errors/m-p/186463#M34310 Chris_Atkinson 2023-07-14T12:01:40Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/traffic-issues-log-flooded-with-errors/m-p/186464#M34311 <P>16GB RAM (used all)</P> <P>latest recommended Jumbo R80.40</P> <P>3 month uptime</P> Fri, 14 Jul 2023 12:03:06 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/traffic-issues-log-flooded-with-errors/m-p/186464#M34311 Wolfgang 2023-07-14T12:03:06Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/traffic-issues-log-flooded-with-errors/m-p/186465#M34312 <P>Maybe below is helpful?</P> <P>Andy</P> <P><A href="https://community.checkpoint.com/t5/General-Topics/Problem-with-5400-device-after-firmware-upgrade-to-80-30/td-p/63796" target="_blank">https://community.checkpoint.com/t5/General-Topics/Problem-with-5400-device-after-firmware-upgrade-to-80-30/td-p/63796</A></P> Fri, 14 Jul 2023 12:12:06 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/traffic-issues-log-flooded-with-errors/m-p/186465#M34312 the_rock 2023-07-14T12:12:06Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/traffic-issues-log-flooded-with-errors/m-p/186466#M34313 <P><a href="https://community.checkpoint.com/t5/user/viewprofilepage/user-id/38213">@the_rock</a>&nbsp;we are running R80.40</P> Fri, 14 Jul 2023 12:16:58 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/traffic-issues-log-flooded-with-errors/m-p/186466#M34313 Wolfgang 2023-07-14T12:16:58Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/traffic-issues-log-flooded-with-errors/m-p/186467#M34314 <P>I know you are, but honestly, thats literally ONLY thing I found related to what you asked, sorry.</P> <P>Andy</P> Fri, 14 Jul 2023 12:17:56 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/traffic-issues-log-flooded-with-errors/m-p/186467#M34314 the_rock 2023-07-14T12:17:56Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/traffic-issues-log-flooded-with-errors/m-p/186469#M34315 <P>Before you reboot, make sure to run cpinfo to record the situation with the memory pressure.</P> Fri, 14 Jul 2023 13:29:43 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/traffic-issues-log-flooded-with-errors/m-p/186469#M34315 Hugo_vd_Kooij 2023-07-14T13:29:43Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/traffic-issues-log-flooded-with-errors/m-p/186470#M34316 <P>Good point, because more info there is before reboot for TAC investigation, the better.</P> <P>Andy</P> Fri, 14 Jul 2023 13:39:44 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/traffic-issues-log-flooded-with-errors/m-p/186470#M34316 the_rock 2023-07-14T13:39:44Z