kernel error messages

[skidsteerpilot]

Hello,

Running R80.40 - build 118 and seeing a tremendous amount of the following in /var/log/messages.

kernel: [<pid>];[<src_ip>:<src_port> -> <dst_ip>:<dst_port>] [ERROR]: up_fw_record_conn: RECORD_CONN inspect func failed

kernel: [<pid>];[<src_ip>:<src_port> -> <dst_ip>:<dst_port>] [ERROR]: up_fw_do_rulebase_accept_action: up_fw_record_conn failed

kernel: [<pid>];[<src_ip>:<src_port> -> <dst_ip>:<dst_port>] [ERROR]: up_manager_fw_handle_first_packet: up_fw_do_rulebase_accept_action failed

This triplet of messages seems to corresponds to a one line "drop" log in the Manage log interface. They all seem to be related to UDP drops, destination is both internal/external to network.

Thoughts on troubleshooting next steps?

[PhoneBoy]

I recommend a TAC case here.

[Stefano_Marchet]

Hi,

do you have any information regarding this issue?

I found the same error in fwk.elg for a VS in VSX gw R80.40 Take 180.

Thanks,

Stefano

[Tal_Paz-Fridman]

Please look at sk170360 https://support.checkpoint.com/results/sk/sk170360 and open a TAC request.

[Stefano_Marchet]

Hi Tal,

SR  was opened at 30 June unfortunately...

This morning I forwarded this SK to TAC, anyway seems to be table.def file is ok.

I'm waiting for TAC wake-up.

Stefano