> Source: [sk105842](https://support.checkpoint.com/results/sk/sk105842)

# sk105842 - Security Gateway in Monitor Mode with enabled SecureXL might freeze intermittently

| Property | Value |
|----------|-------|
| Solution ID | sk105842 |
| Date Created | 2015-04-25 |
| Last Modified | 2017-05-24 |
| Technical Level | Advanced |
| Products | Security Gateway |
| Versions | R82.10, R82, R81.20 |
| OS | Gaia |

## Symptoms

- * Security Gateway configured in Monitor Mode (per [sk101670](http://supportcontent.checkpoint.com/solutions?id=sk101670)) with enabled SecureXL might freeze intermittently (no access to console, only cold reboot helps).

* SmartView Monitor and output of "*cat /proc/meminfo*" command show that memory consumption increases over time.

* Output of "*cat /proc/slabinfo* " command shows huge amount of active *skb*.

  *Example*:

  ```
  
  skbuff_head_cache            2904067 2907510   ... slabdata  193834  193834     22
  skb_managed_shinfo_cache     2904237 2907852   ... slabdata  242321  242321      0
  skb_managed_data_cache_4096        2       2   ... slabdata       2       2      0
  skb_managed_data_cache_2048  2903838 2905798   ... slabdata 1452899 1452899      0
  skb_managed_data_cache_1024        0       0   ... slabdata       0       0      0
  skb_managed_data_cache_256       333     432   ... slabdata      27      27     59
  skbuff_fclone_cache               26      28   ... slabdata       4       4      0
  ```

* */var/log/messages* file repeatedly shows that prior to the freeze, Linux Out-of-Memory mechanism was killing multiple processes.

  *Examples*:
  *

    ```
    
    kernel: <NAME_OF_PROCESS> invoked oom-killer: ...
    kernel: 
    kernel: Call Trace: 
    kernel: out_of_memory: trying to free memory using oom_notify_list 
    kernel: [<...>] out_of_memory+0x...
    kernel: [<...>] __alloc_pages+0x...
    kernel: [<...>] read_swap_cache_async+0x...
    kernel: [<...>] __handle_mm_fault+0x...
    kernel: [<...>] do_page_fault+0x...
    kernel: [<...>] do_mmap_pgoff+0x...
    kernel: [<...>] error_exit+0x...
    ```

  *

    ```
    
    kernel: <NAME_OF_PROCESS> invoked oom-killer: ...
    kernel: 
    kernel: Call Trace:
    kernel: out_of_memory: trying to free memory using oom_notify_list
    kernel: [<...>] out_of_memory+0x...
    kernel: [<...>] autoremove_wake_function+0x...
    kernel: [<...>] __alloc_pages+0x...
    kernel: [<...>] read_swap_cache_async+0x...
    kernel: [<...>] swapin_readahead+0x...
    kernel: [<...>] __handle_mm_fault+0x...
    kernel: [<...>] _atomic_dec_and_lock+0x...
    kernel: [<...>] do_page_fault+0x...
    kernel: [<...>] error_exit+0x...
    ```

## Cause

Possible memory leak in SecureXL SIM module related to the integration with the Bridge driver.

## Solution

This solution requires authentication. Please log in to view the full solution.

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content