Have seen this before but you might want to check your connection table size and your memory usage.
I haven't had the pleasure of running NG yet but I have heard FP1 is not the release you want to be on. My understanding of that release is there were/are still a large number of bugs rummaging through the code. -Fitz -----Original Message----- From: Shannon Johnston [mailto:[EMAIL PROTECTED]] Sent: Friday, January 03, 2003 4:37 PM To: [EMAIL PROTECTED] Subject: [FW-1] Dropping traffic & errors generated... My firewall has been getting flaky lately and dropping traffic that it shouldn't be. Also the logs have been filling with the following: Jan 3 13:00:16 denmain [LOG_CRIT] kernel: FW-1: fwconn_record_conn: ld_set_wto(connections) failed Jan 3 13:00:16 denmain [LOG_CRIT] kernel: FW-1: fwconn_chain_update: ld_set_wto(connections) failed Jan 3 13:00:16 denmain [LOG_CRIT] kernel: FW-1: fwconn_chain_set_something: fwconn_chain_update failed (6) Jan 3 13:00:16 denmain [LOG_CRIT] kernel: FW-1: fwconn_chain_update: ld_set_wto(connections) failed Jan 3 13:00:16 denmain [LOG_CRIT] kernel: FW-1: fwconn_chain_set_something: fwconn_chain_update failed (6) Jan 3 13:00:19 denmain [LOG_CRIT] kernel: FW-1: fwconn_record_conn: ld_set_wto(connections) failed Jan 3 13:00:19 denmain [LOG_CRIT] kernel: FW-1: fwconn_chain_update: ld_set_wto(connections) failed Jan 3 13:00:19 denmain [LOG_CRIT] kernel: FW-1: fwconn_chain_set_something: fwconn_chain_update failed (6) Jan 3 13:00:19 denmain [LOG_CRIT] kernel: FW-1: fwconn_chain_update: ld_set_wto(connections) failed Jan 3 13:00:19 denmain [LOG_CRIT] kernel: FW-1: fwconn_chain_set_something: fwconn_chain_update failed (6) Jan 3 13:00:22 denmain [LOG_CRIT] kernel: FW-1: fwconn_record_conn: ld_set_wto(connections) failed Jan 3 13:00:23 denmain [LOG_CRIT] kernel: FW-1: fwconn_chain_update: ld_set_wto(connections) failed Jan 3 13:00:23 denmain [LOG_CRIT] kernel: FW-1: fwconn_chain_set_something: fwconn_chain_update failed (6) Jan 3 13:00:23 denmain [LOG_CRIT] kernel: FW-1: fwconn_chain_update: ld_set_wto(connections) failed Jan 3 13:00:23 denmain [LOG_CRIT] kernel: FW-1: fwconn_chain_set_something: fwconn_chain_update failed (6) Jan 3 13:00:23 denmain [LOG_CRIT] kernel: FW-1: fwconn_record_conn: ld_set_wto(connections) failed Jan 3 13:00:23 denmain [LOG_CRIT] kernel: FW-1: fwconn_chain_update: ld_set_wto(connections) failed Jan 3 13:00:23 denmain [LOG_CRIT] kernel: FW-1: fwconn_chain_set_something: fwconn_chain_update failed (6) Jan 3 13:00:23 denmain [LOG_CRIT] kernel: FW-1: fwconn_chain_update: ld_set_wto(connections) failed Jan 3 13:00:23 denmain [LOG_CRIT] kernel: FW-1: fwconn_chain_set_something: fwconn_chain_update failed (6) Jan 3 13:00:27 denmain [LOG_CRIT] kernel: FW-1: fwconn_record_conn: ld_set_wto(connections) failed Jan 3 13:00:27 denmain [LOG_CRIT] kernel: FW-1: fwconn_chain_update: ld_set_wto(connections) failed Jan 3 13:00:27 denmain [LOG_CRIT] kernel: FW-1: fwconn_chain_set_something: fwconn_chain_update failed (6) Jan 3 13:00:27 denmain [LOG_CRIT] kernel: FW-1: fwconn_chain_update: ld_set_wto(connections) failed Jan 3 13:00:27 denmain [LOG_CRIT] kernel: FW-1: fwconn_chain_set_something: fwconn_chain_update failed (6) Jan 3 13:00:29 denmain [LOG_CRIT] kernel: FW-1: fwconn_record_conn: ld_set_wto(connections) failed Jan 3 13:00:29 denmain [LOG_CRIT] kernel: FW-1: fwconn_chain_update: ld_set_wto(connections) failed Jan 3 13:00:29 denmain [LOG_CRIT] kernel: FW-1: fwconn_chain_set_something: fwconn_chain_update failed (6) Jan 3 13:00:29 denmain [LOG_CRIT] kernel: FW-1: fwconn_chain_update: ld_set_wto(connections) failed Jan 3 13:00:29 denmain [LOG_CRIT] kernel: Jan 3 13:00:29 denmain [LOG_CRIT] kernel: FW-1: stopping debug messages for the next 32 seconds Jan 3 13:01:06 denmain [LOG_CRIT] kernel: FW-1: lost 2991 debug messages Has anybody seen this before? I couldn't find any reference to it on the internet. Configuration: Nokia IP440 running IPSO 3.4.2-FCS2 Checkpoint VPN-1/FW-1 NG FP1 -- Shannon Johnston <[EMAIL PROTECTED]> ================================================= To set vacation, Out Of Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= ================================================= To set vacation, Out Of Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
