topic Re: kernel error messages in General Topics

kernel error messages

skidsteerpilot — Wed, 14 Apr 2021 14:09:01 GMT

Hello,

Running R80.40 - build 118 and seeing a tremendous amount of the following in /var/log/messages.

kernel: [<pid>];[<src_ip>:<src_port> -> <dst_ip>:<dst_port>] [ERROR]: up_fw_record_conn: RECORD_CONN inspect func failed

kernel: [<pid>];[<src_ip>:<src_port> -> <dst_ip>:<dst_port>] [ERROR]: up_fw_do_rulebase_accept_action: up_fw_record_conn failed

kernel: [<pid>];[<src_ip>:<src_port> -> <dst_ip>:<dst_port>] [ERROR]: up_manager_fw_handle_first_packet: up_fw_do_rulebase_accept_action failed

This triplet of messages seems to corresponds to a one line "drop" log in the Manage log interface. They all seem to be related to UDP drops, destination is both internal/external to network.

Thoughts on troubleshooting next steps?

Re: kernel error messages

PhoneBoy — Fri, 16 Apr 2021 17:46:40 GMT

I recommend a TAC case here.

Re: kernel error messages

Stefano_Marchet — Thu, 03 Aug 2023 13:30:18 GMT

Hi,

do you have any information regarding this issue?

I found the same error in fwk.elg for a VS in VSX gw R80.40 Take 180.

Thanks,

Stefano

Re: kernel error messages

Tal_Paz-Fridman — Thu, 03 Aug 2023 13:50:53 GMT

Please look at sk170360 https://support.checkpoint.com/results/sk/sk170360 and open a TAC request.

Re: kernel error messages

Stefano_Marchet — Thu, 03 Aug 2023 13:56:03 GMT

Hi Tal,

SR was opened at 30 June unfortunately...

This morning I forwarded this SK to TAC, anyway seems to be table.def file is ok.

I'm waiting for TAC wake-up.

Stefano