The information you are about to copy is INTERNAL!
DO NOT share it with anyone outside Check Point.
ARP table size keeps increasing
Security Gateway, VSX
Platform / Model
Show more details
Show less details
Value of the output from 'arp -na' keeps increasing, until it is cleared manually or device is rebooted.
The command 'ip neighbor' output shows large number of "STALE" entries.
The value of 'arp -an' may not continually increase, but the size of the arp slab cache increases, which may lead to the following messages logged in /var/log/messages: kernel: Neighbour table overflow
kernel: [fw4_0];fwmultik_f2p_routing: fw_os_route_retrieve_streaming failed
The size of the arp slab cache can be monitored with the following command:cat /proc/slabinfo | grep "arp", with the associated gc_thres (garbage collection thresholds) viewed with the following command: grep "" /proc/sys/net/ipv4/neigh/*/* | grep "gc_thres"