CPUG

The Check Point User Group

A Resource For The Check Point Community.  Fast.  Useful.  Independent.

1. CCSA/CCSE One-Week Dual-Certification Training Course with CPUG in San Francisco!
    Courses Starting 12/8, (2009) 1/19, 2/9, 3/9, 4/6, 5/4, 6/8, 7/6, 8/3.
2. Join Us On LinkedIn - We now have a CPUG group.


Go Back   CPUG: The Check Point User Group > Check Point Firewall-1/VPN-1 And Related Products > Miscellaneous
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 2006-02-13
Junior Member
 
Join Date: 2005-12-29
Posts: 11
Rep Power: 0
fluffy998 has an average reputation (10+)
Default CPAS_TCP_PASS in event log

I am receiving these messages every minute in system event log:
CPAS_TCP_PASS_DATA: asked to transfer XXkb which is more thatn q(53). I have applied HFA 02, but still receiving the error. Am running in Win2k3. Any help would be much appreciated.
__________________
CCSA, CCSE, MCSA:security
Reply With Quote
  #2 (permalink)  
Old 2006-02-13
Member
 
Join Date: 2006-01-09
Posts: 72
Rep Power: 3
ddarby1 has an average reputation (10+)
Default Re: CPAS_TCP_PASS in event log

Just a guess here:

Looks like a QoS type error message? Do you perhaps have Microsft's QoS installed as a service on one of the LAN connections?

Is anything failing or particularly slow as a result of this error?

Can you elaborate any more on the config of the server, what services are installed for example?
Reply With Quote
  #3 (permalink)  
Old 2006-02-13
Junior Member
 
Join Date: 2005-12-29
Posts: 11
Rep Power: 0
fluffy998 has an average reputation (10+)
Default Re: CPAS_TCP_PASS in event log

No QOS installed :o(. Windows or Checkpoint.

Can't notice anything being particularly slow, all seems to be working ok.
The server itself is pretty basic, just NGX R60 installed, is gateway and Smartcentre on same machine. Firewall and VPN-1, and logging server is all it seems to be doing.

Since applying HFA02 the error has changed from q(53) to q(157), not sure if this has any relevance.
__________________
CCSA, CCSE, MCSA:security
Reply With Quote
  #4 (permalink)  
Old 2006-02-13
Member
 
Join Date: 2005-09-15
Posts: 65
Rep Power: 4
stuartgreen has an average reputation (10+)
Default Re: CPAS_TCP_PASS in event log

so far as i'm aware this is only an info error and doesn't actually cause any ill effects on operation. Try searching the nokia KB for it, think if i remember rightly its to do with an error in the streaming engine (something internal anyway). It should have been addressed in the latest HFA i think?
Reply With Quote
  #5 (permalink)  
Old 2006-02-13
Junior Member
 
Join Date: 2005-12-29
Posts: 11
Rep Power: 0
fluffy998 has an average reputation (10+)
Default Re: CPAS_TCP_PASS in event log

I've installed the latest HFA but still getting the error :o(.

Do u know the URL for the Nokia KB?

Thanks for your help.
__________________
CCSA, CCSE, MCSA:security
Reply With Quote
  #6 (permalink)  
Old 2006-02-13
Senior Member
 
Join Date: 2005-11-21
Location: Europe, Lithuania
Posts: 291
Rep Power: 4
Sergej has an average reputation (10+)
Default Re: CPAS_TCP_PASS in event log

Quote:
Originally Posted by fluffy998
I've installed the latest HFA but still getting the error :o(.

Do u know the URL for the Nokia KB?

Thanks for your help.
Checkpoint NG with AI for Dummies

Go to the www.nokia.com/support -> "Support for Business
Products" and get one. You need to have you Nokia appliance Serial Number for documentation download.
Edit/Delete Message
Reply With Quote
  #7 (permalink)  
Old 2006-02-13
Senior Member
 
Join Date: 2005-08-22
Location: Ottawa, Canada
Posts: 347
Rep Power: 4
Lackie has an average reputation (10+)
Default Re: CPAS_TCP_PASS in event log

Description:

In Checkpoint NGX Smartviewer log errors with cpas_tcp_pass_data are seen, these errors are from a bug the streaming engine. These errors can also show up in the messages file.

Example output

[LOG_CRIT] kernel: cpas_tcp_pass_data: asked to transfer 160 bytes which is more than in q(159)
[LOG_CRIT] kernel: cpas_tcp_pass_data: asked to transfer 89 bytes which is more than in q(88)

The data transfer sizes can vary.

Solution:

The issue was a problem in the MSN messenger inspection which miscalculated the buffer length by one byte.

There is a hotfix for this if you are running the base build of R60. This hotfix is already included in the R60_HFA_01 release and does not need to be installed again after applying R60_HFA_01 or R60_HFA_02.
Reply With Quote
  #8 (permalink)  
Old 2006-02-15
Junior Member
 
Join Date: 2005-12-29
Posts: 11
Rep Power: 0
fluffy998 has an average reputation (10+)
Default Re: CPAS_TCP_PASS in event log

Thanks guys. I'm running on Win2003, not using nokia box :o(. I've applied R60_HFA_02, but still received the error. not sure if I applied it wrong?, just ran the two files from the tgz file. - My server does everything, gateway as well as smartcentre.

I'll try running HFA_02 again and see if it's any better this time.
__________________
CCSA, CCSE, MCSA:security
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


All times are GMT -7. The time now is 13:01.


Powered by vBulletin® Version 3.7.4
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.2.0