[LOG_CRIT] kernel: cpas_pkt_h: No tcpopq! cdir 1, ip_p 1

[ChrisA]

We're running NGX HFA02 on Nokia IP710s running IPSO 3.9 Bld45. Does anyone know what this message means? I can't find anything on the CheckPoint SecureKnowledge database. Thanks.

[BarryStiefel]

Originally Posted by ChrisA

We're running NGX HFA02 on Nokia IP710s running IPSO 3.9 Bld45. Does anyone know what this message means? I can't find anything on the CheckPoint SecureKnowledge database. Thanks.

Not that this helps any, but I hope someone can provide a good answer because once it gets indexed by Google then everyone will able to find the answer here.

[ChrisA]

From Nokia:
This is a harmless debug error.
Please run the following to suppress this error -

fw ctl debug -m CPAS - error

To make these changes persistent, you need to add these commands to a script that should run during startup, after the firewall driver is loaded.

[kr1m1n4l]

AlThough I am 2 years late,

I would like to know the answer of that because I dont the answer of chrisA, is incorrect.

I do not pretend to know the answer but I think that it CAN (not will) cause harm.

One can see the following error message in the console and /var/log/messages file:
cpas_pkt_h: No tcpopq! cdir 1, ip_p 1

This means that ICMP packet was generated on the connection before any tcp packet passes (ACK/ACK+Data/Other...) on the same connection.

This can happen when the network connectivity is degraded.

This ICMP packet will be dropped and the connection will keep on running intact