The "$FWDIR/log/fwk.elg" or "var/log/messages" file is flooded with "cmik_loader_fw_context_match_cb"

Product

Check Point Appliances

Version

R81 (EOS), R81.10 (EOS), R81.20

OS

Gaia

Last Modified

2025-02-26

Symptoms

• The $FWDIR/log/fwk.elg or /var/log/messages file on the Security Gateway / Cluster Member contains this line repeatedly:

cmik_loader_fw_context_match_cb: match_cb for CMI APP 31 - DNS_DATA_SOURCE failed on context 201, executing context 366 and adding the app to apps in exception

• Traffic outages through a Security Gateway / Cluster / VSX Virtual System, and core dumps are created.

• Apply to Check Point Appliances, Virtual Machines, and Open Servers.

Cause

A failure to extract a DNS attribute from the DNS server response.

Solution

This problem was fixed. The fix is included in:

• Check Point R82
• Jumbo Hotfix Accumulator for R81.20 starting from Take 90
• Jumbo Hotfix Accumulator for R81.10 starting from Take 171
• Jumbo Hotfix Accumulator for R81 starting from Take 106

If you choose not to upgrade, Check Point can supply a Hotfix. Contact Check Point Support to get a Hotfix for this issue.

A Support Engineer will make sure the Hotfix is compatible with your environment before providing the Hotfix.

For faster resolution and verification, please collect CPinfo files from the Security Management Server and Security Gateways involved in the case.

Hotfix installation instructions:

Refer to sk168597 - How to install a Hotfix.

NOTE

This solution has been verified for the specific scenario, described by the combination of Product, Version and Symptoms. It may not work in other scenarios.

Article Properties

Access Level: General

Status: Approved by TAC

Date Created: 2024-08-21

Last Modified: 2025-02-26