> -----Opprinnelig melding----- Hugo van der Kooij wrote: > Berg-Olsen, Børge wrote: > | Gurus of the list, > | > | We're getting these every minute one console. Firewalls are IPSO 4.2 > build 25 on Nokia IP3xx flash and disk based, running R61 and R62 > respectively. The IP3xxx are running pairwise in a internal / external > firewall cluster. > > What 3xx hardware are we talking about? 330's, 350's, 380's or 390's? > How much memory and what size is the flash? (Those darn flash > things are a major pain if you ask me and should be avoided.)
IP390 flash based, IP385 diskbased. I get the messages on both, but only on the active cluster member. Agree about the flash, but we've had IP350s that ate through a couple of harddisk as well. IPSO 4.1 build 16 ran on those, upgraded and no problem. No explanation as to why the harddisk was erased though. See gripe farther down. > | Feb 5 11:23:00 intfw1-a [LOG_CRIT] kernel: FW-1: lost 990 > debug messages > | Feb 5 11:23:00 intfw1-a [LOG_CRIT] kernel: FW-1: > fw_spii_get_params_ptr: error - failed to resolve kbuf from > pset id 100. > | Feb 5 11:23:00 intfw1-a [LOG_CRIT] kernel: FW-1: > fw_spii_param_get_regexp2: got NULL buffer. > > Are you using VPN's? How did you configure them? What Check Point > version exactly? Yes we're using VPN (who doesn't these days. ;-) ) Configured in simplified mode. CheckPoint versions R61 HFA03 (IP380s), R62 (IP390s) no patch exist to my knowledge - other than R65 latest HFA. > If you did not yet install the latest HFA that applies to that version > then do so before you go on. the usual resolution to anything kbuf > releated lies in applying the proper fix. Hence the need to apply the > latest HFA before you even bother to open a case. This is my experience too. The reason behind my post was to see if anyone had seen the same error messages, and if they had fixed it and what they did to fix it and what was the cause of the log critical errors. If the fix is applying the latest HFA or major upgrade I find it a little disconcerning as we then don't know what the error was other than that the latest patch fixed it and we can go on unwittingly about underlying problems with either the software, hardware or configuration. Regards, Børge ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
