Significant packet drops on interfaces configured with jumbo frames on 9800 appliances

Product

SecureXL

Version

R81.20, R82, R82.10

OS

Gaia

Platform

9000

Last Modified

2025-09-07

Symptoms

• Significant packet drops on interfaces configured with jumbo frames, along with decreasing mbuf (memory buffer) counts that cause Security Gateway unresponsiveness. The issue occurs on 9800 appliances.
• These errors may be printed in USIM process log messages:

[uspace];[tid_XX];[UPPAK];m_get: allocation failure

[uspace];[tid_XY];[UPPAK];cpfifo_port_allocate_mbufs: DPDK CPFIFO Out of mbuf

• Solution from sk182825 does not apply.

Cause

When many Secure Network Distributors (SNDs) operate with NICs, the system may exhaust available jumbo mbufs (memory buffers used for packet allocation), resulting in connectivity issues. Poor performance and inability to log new events occurs because of buffer exhaustion.

Solution

This problem was fixed. The fix is included in:

• Jumbo Hotfix Accumulator for R82 starting from Take 41
• Jumbo Hotfix Accumulator for R81.20 starting from Take 115

If you choose not to upgrade, Check Point can supply a Hotfix. Contact Check Point Support to get a Hotfix for this issue.

A Support Engineer will make sure the Hotfix is compatible with your environment before providing the Hotfix.

For faster resolution and verification, please collect CPinfo files from the Security Management Server and Security Gateways involved in the case.

Hotfix installation instructions:

Refer to sk168597 - How to install a Hotfix.

NOTE

This solution has been verified for the specific scenario, described by the combination of Product, Version and Symptoms. It may not work in other scenarios.

Article Properties

Access Level

General

Status

Approved by TAC

Date Created

2025-08-25

Last Modified

2025-09-07