topic Re: Check Point MIB OIDs delayed response in General Topics

Check Point MIB OIDs delayed response

S_K_S — Wed, 08 Apr 2020 15:06:45 GMT

On one of our R80.30 appliances we have an intermittent issue with the monitoring which we have traced down to certain OIDs from the .2620 tree which fail to respond in time. Interestingly enough, the issue does not appear to be with SNMP as such but rather with CPD as it fails a call to some libraries. Specifically, the cpd.elg file is filled with messages like the below:

[CPD 11415]@FW[8 Apr 16:45:20] Warning:cp_timed_blocker_handler: A handler [0xf67cd980] blocked for 10 seconds.
[CPD 11415]@FW[8 Apr 16:45:20] Warning:cp_timed_blocker_handler: Handler info: Library [/opt/CPshrd-R80.30/lib/libcpstatext.so], Function offset [0x13980].
[CPD 11415]@FW[8 Apr 16:45:35] Warning:cp_timed_blocker_handler: A handler [0xf12c2e90] blocked for 6 seconds.
[CPD 11415]@FW[8 Apr 16:45:35] Warning:cp_timed_blocker_handler: Handler info: Library [/opt/CPsuite-R80.30/fw1/lib/libfwstatagent.so], Function offset [0x7e90].
[8 Apr 16:45:35] CPStatGet: function excessive time. oid is: 1.3.6.1.4.1.2620.1.1.25.6

I have noticed that whenever such logs pop in the file, CPD hits 100% utilization on its CPU core. Some 95% of the logs are for issues with OIDs from 1.3.6.1.4.1.2620.1.1.25. subtree. Any ideas about the possible cause would be appreciated. 🙂

Re: Check Point MIB OIDs delayed response

PhoneBoy — Sat, 11 Apr 2020 00:31:15 GMT

Probably best to open a TAC case.

Re: Check Point MIB OIDs delayed response

S_K_S — Mon, 27 Apr 2020 06:06:40 GMT

That I did, but the silence so far has been deafening...

Re: Check Point MIB OIDs delayed response

PhoneBoy — Mon, 27 Apr 2020 14:36:27 GMT

Please send me a PM with the SR number, I'll investigate.

Re: Check Point MIB OIDs delayed response

bartlettj — Wed, 10 Jun 2020 12:10:05 GMT

I am seeing the same issue. I am curious what was the outcome of your TAC case?

Re: Check Point MIB OIDs delayed response

Dan_McLeod — Wed, 10 Jun 2020 13:10:28 GMT

Just curious if there was ever a resolution found for this? We just upgraded to R80.30 from R80.10 and are running into the exact same issue.

Re: Check Point MIB OIDs delayed response

Martin_Valenta — Wed, 10 Jun 2020 16:03:53 GMT

how many cores you have?

Re: Check Point MIB OIDs delayed response

S_K_S — Wed, 27 Jan 2021 07:31:14 GMT

Very late response but the issue appeared to be some sort of a bug or bad coding. We installed 4 or 5 different hotfixes provided by TAC until the final one seemingly resolved the issue (it has not re-appeared for nearly 3 months now).

If it's of any good to anyone - the affected firewall has quite a lot of VLAN interfaces (more than 150).