> Source: [sk150174](https://support.checkpoint.com/results/sk/sk150174)

# sk150174 - Unstable API Extraction behavior in Threat Prevention

| Property | Value |
|----------|-------|
| Solution ID | sk150174 |
| Date Created | 2019-04-06 |
| Last Modified | 2019-04-07 |
| Technical Level | Advanced |
| Products | Security Gateway |
| Versions | R82.10, R82, R81.20 |
| OS | Gaia |

## Symptoms

- * First time Output of the request command:   


  `#curl -s -k https://[IP]/UserCheck/TPAPI --data @/tmp/json.txt `  


  provides the expected response as mentioned in the [Threat Prevention API Reference Guide.](https://sc1.checkpoint.com/documents/TPAPI/CP_1.0_ThreatPreventionAPI_APIRefGuide/html_frameset.htm)  


  Second time, would lead to an Error as follows: \[Could be different file or the same one\]  

  ```
  
  office.mbox:1 TX STATUS changed
  office.mbox:2 TX STATUS error
  office.mbox:3 TX STATUS changed
  office.mbox:4 TX STATUS error
  office.mbox:5 TX STATUS changed
  office.mbox:6 TX STATUS error
  office.mbox:7 TX STATUS changed
  office.mbox:8 TX STATUS error
  office.mbox:9 TX STATUS changed
  office.mbox:10 TX STATUS error
  office.mbox:11 TX STATUS changed
  office.mbox:12 TX STATUS error
  office.mbox:13 TX STATUS changed
  office.mbox:14 TX STATUS error TE
  ```

  <br />

* Core dumps are found in /var/log/dump/usermode (core dumps with big size):  

  ```
  
  -rw-r--r-- 1 admin root 5816320 Jan 28 15:28 cp_file_convert.3490.core.gz
  -rw-r--r-- 1 admin root 22543666 Jan 28 15:32 scrubd.19125.core.gz
  -rw-r--r-- 1 admin root 22557202 Jan 28 15:33 scrubd.22930.core.gz
  ```

  <br />

## Cause

A misbehaviour in the second attempt would lead to accidentally free the Threat Prevention profile's scrubbed_parts_codes list.

## Solution

This solution requires authentication. Please log in to view the full solution.

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content