topic Re: problem with packet drops r80.30 in Firewall and Security Management

problem with packet drops r80.30

moh_ym — Thu, 08 Oct 2020 20:16:27 GMT

Hi!

Every time we install policy changes on our gw, after 2 to 4 minutes we are getting some packet drops random.
Under "var/log/message" we found this log:

"kernel: [SIM4];pkt_handle_f2v_if_needed: dropping packet (failed to send notification), conn: <192.168.114.6,53955,10.141.179.100,1433,6>"

Can someone explain what is the reason?

Thanks

/Mohammed

Re: problem with packet drops r80.40

Timothy_Hall — Thu, 08 Oct 2020 17:04:38 GMT

See this thread:

https://community.checkpoint.com/t5/VSX/Issue-with-SecureXL/td-p/95133

Re: problem with packet drops r80.40

moh_ym — Fri, 09 Oct 2020 15:00:35 GMT

Thanks for the thread. But i think we do have diffrent problem. Our problem is every time we install policy after some minuters we do get packet drops for some application, this is a random and it takes upto 1 minute. After that everything began work igen as a normal untill we install a new policy.

Edited, see logs from cpd.elg

[CPD 48157]@DC-FW2PRIM-02[8 Oct 10:11:38] Warning:cp_timed_blocker_handler: A handler [0xfxjxs170] blocked for 10 seconds.

[CPD 48157]@DC-FW2PRIM-02[8 Oct 10:11:38] Warning:cp_timed_blocker_handler: Handler info: Library [/opt/CPsuite-R80.30/fw1/lib/libvpninfo.so], Function offset [0x85960].

[CPD 48157]@DC-FW2PRIM-02[8 Oct 10:11:38] Warning:cp_timed_blocker_handler: A handler [0xf52xfr00] blocked for 10 seconds.

.......

Note: "_ZNCCalcStatisticalOidIyLiCBEPv" is modified.

Re: problem with packet drops r80.40

PhoneBoy — Thu, 08 Oct 2020 22:59:42 GMT

Recommend a TAC case here.

Re: problem with packet drops r80.40

moh_ym — Fri, 09 Oct 2020 06:11:42 GMT

We already have a case, but someone else may have experienced this problem before.

Re: problem with packet drops r80.40

Ilya_Yusupov — Sun, 11 Oct 2020 08:01:25 GMT

Hi @moh_ym ,

can you please share the TAC case so I can review the case?

Thanks,

Ilya

Re: problem with packet drops r80.30

DZ_KB — Mon, 24 Nov 2025 07:25:00 GMT

I have the same problem with r81.20 gateway.
Can you please share the TAC answer ?

Re: problem with packet drops r80.30

Chris_Atkinson — Mon, 24 Nov 2025 09:05:11 GMT

Suspect the original issue related to sk168674. Which R81.20 JHF take do you have?

Re: problem with packet drops r80.30

DZ_KB — Mon, 24 Nov 2025 09:31:10 GMT

The actual and last T119