topic Re: CPD-SNMP CRASH or DOWN in Firewall and Security Management

CPD-SNMP CRASH or DOWN

Ricki_Juntak — Thu, 10 Oct 2024 01:38:12 GMT

Hi Checkmates,

We face the issue: during Security gateway(cluster) handle the traffic, security gateway down on the SMS and from monitoring by SNMP, when security gateway down check from SMS with netstat -an | grep 18192 is listen, but from security gateway netstat -an | grep 18192 not showing anything but netstat -an | grep 18191 is listen.

this is log from cpd.elg:

Warning:cp_timed_blocker_handler: A handler [0xf56910c0] blocked for 3 seconds.

Warning:cp_timed_blocker_handler: Handler info: Library [/opt/CPshrd-R81.10/lib/libosstatagent.so], Function offset [0x40c0].
CPStatGet: function excessive time. oid is: 1.3.6.1.4.1.2620.1.6.7.7.1.1.2

Warning:cp_timed_blocker_handler: A handler [0xf5b5d980] blocked for 3 seconds.
Warning:cp_timed_blocker_handler: Handler info: Library [/opt/CPshrd-R81.10/lib/libcpstatext.so], Function offset [0x13980].

Failed to get table status for auth_status (1): No such file or directory
Failed to get table status for auth_status (1): No such file or directory
Failed to get table status for auth_status (1): No such file or directory
Failed to get table status for auth_status (1): No such file or directory

After failover the traffic to handle by another gateway, gateway with issue is coming up on the SMS and on the monitoring.

Re: CPD-SNMP CRASH or DOWN

PhoneBoy — Thu, 10 Oct 2024 15:29:26 GMT

Best to open a TAC case here: https://help.checkpoint.com

Re: CPD-SNMP CRASH or DOWN

Ricki_Juntak — Fri, 11 Oct 2024 01:25:04 GMT

Hi PhoneBoy,

Thank you,

Yes, already open TAC but until now there is no solution from tac or RnD

Re: CPD-SNMP CRASH or DOWN

PhoneBoy — Fri, 11 Oct 2024 13:55:04 GMT

Please send me the SR in a PM.

Re: CPD-SNMP CRASH or DOWN

the_rock — Fri, 11 Oct 2024 14:30:00 GMT

What version/jhf is this?

Best,

Andy

Re: CPD-SNMP CRASH or DOWN

Ricki_Juntak — Fri, 01 Nov 2024 04:02:02 GMT

CP5900 with R81.10 JHFT156 and from TAC already provide private hotfix and installed to gateway with issue but the issue not solved.