The information you are about to copy is INTERNAL!
DO NOT share it with anyone outside Check Point.
Packets are dropped on Security Gateway because maximal number of Symbolic Links for connections was reached in Connections Table
Technical Level
Solution ID
sk41916
Technical Level
Product
Quantum Security Gateways
Version
All
Date Created
25-May-2009
Last Modified
25-Nov-2015
Symptoms
Very low traffic on the Security Gateway.
Kernel debug ('fw ctl debug -m fw + drop') shows:
dropped by fw_conn_post_inspect Reason: fwconn_init_links (OUTBOUND) failed
/var/log/messages file contains the following errors:
h_slink: table is full
h_getlinks: allocation failed
Output of 'fw tab -t connections -s' command shows that the ratio of #SLINKS / #VALS is greater than/equal to 5.
Cause
For each entry of real connection, up to eight Symbolic Links (SLINKS) can be added. The above error messages appear when the system tries to add new entries, but the maximal number of SLINK entries was reached in the Connections Table.
