Check Point has a patch for it. Once we applied the patch, the problem
went away. Do you have Check Point support? If so, call them and ask for
fw1_HOTFIX_DAL_HF_BASE_015.tgz. It is a gateway only patch so don't
apply it to your management server (this is a big mistake). It does
resolve the issue below.
Bill
Jeremy R Morrill wrote:
I am seeing this exact same problem under SPAT NGX R60 on my Dell
PowerEdge 1750 w/2Gig of ram single processor w/hyperthreading. Does
anyone know a resolution to the problem or how to get SPLAT to boot into
single processor mode by default?
-JRM
_________________________________________________________________
Jeremy Morrill
Project Manager
Phillips Academy
AIM: zmq503o1
MSN: [EMAIL PROTECTED]
( Tel#: 978-749-4607
+ Email: [EMAIL PROTECTED]
__________________________________________________________________
-----Original Message-----
From: Mailing list for discussion of Firewall-1
[mailto:[EMAIL PROTECTED] On Behalf Of Bill
Mathews
Sent: Saturday, August 20, 2005 9:58 AM
To: [email protected]
Subject: [FW-1] NGX and hyperthreading (single CPU)
Has anyone ever seen anything similar to the following? These messages
appears shortly before the firewall take a dive. I believe it has
something to do with Check Point insisting that a hyperthreaded CPU is
two CPUs. When I boot into 'single CPU' mode, this appears to go away.
I'm very curious to see if anyone else has seen this. I've only seen it
on NGX. Thanks.
Aug 19 17:16:09 zuul kernel: FW-1: fw_spii_set_action: error(2) - failed
to get
end handler! possible memory leak!
Aug 19 17:16:09 zuul kernel: FW-1: fw_spii_set_action: error(2) - failed
to get
end handler! possible memory leak!
Aug 19 17:16:09 zuul kernel: fwhandle_get(fwbuf.c:957): Table kbufs -
Invalid ha
ndle e899f5c8 (bad pool)
Aug 19 17:16:09 zuul kernel: fwhandle_get(spii.c:3431): Table kbufs -
Invalid ha
ndle e899f5c8 (bad pool)
Aug 19 17:16:09 zuul kernel: FW-1: fw_spii_pset_free: error - failed to
get kbuf
buffer!
Aug 19 17:16:09 zuul kernel: fwhandle_get(spii.c:3436): Table kbufs -
Invalid ha
ndle e899f5c8 (bad pool)
Aug 19 17:16:09 zuul kernel: FW-1: fwkbuf_free(spii.c 3436): kbuf id is
not foun
d: e899f5c8
Aug 19 17:16:09 zuul kernel: FW-1: fw_spii_set_action: error(2) - failed
to get
end handler! possible memory leak!
Aug 19 17:16:09 zuul kernel: fwhandle_get(fwbuf.c:957): Table kbufs -
Invalid ha
ndle 686d616c (bad pool)
Aug 19 17:16:09 zuul kernel: fwhandle_get(spii.c:3431): Table kbufs -
Invalid ha
ndle 686d616c (bad pool)
Aug 19 17:16:09 zuul kernel: FW-1: fw_spii_pset_free: error - failed to
get kbuf
buffer!
Aug 19 17:16:09 zuul kernel: fwhandle_get(spii.c:3436): Table kbufs -
Invalid ha
ndle 686d616c (bad pool)
Bill
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================
