> Source: [sk157252](https://support.checkpoint.com/results/sk/sk157252)

# sk157252 - ARP table size keeps increasing

| Property | Value |
|----------|-------|
| Solution ID | sk157252 |
| Date Created | 2019-07-02 |
| Last Modified | 2021-04-01 |
| Technical Level | General |
| Products | Security Gateway |
| Versions | R82.10, R82, R81.20 |
| OS | Gaia |

## Symptoms

- * Value of the output from `'arp -na'` keeps increasing, until it is cleared manually or device is rebooted.
* The command `'ip neighbor'` output shows large number of "STALE" entries. (You can run: "`ip neighbor | grep "STALE" | wc -l`")
* The value of 'arp -an' may not continually increase, but the size of the arp slab cache increases, which may lead to the following messages logged in /var/log/messages:  
  `kernel: Neighbour table overflow`  
  `
  kernel: [fw4_0];fwmultik_f2p_routing: fw_os_route_retrieve_streaming failed`
* The size of the arp slab cache can be monitored with the following command:*cat /proc/slabinfo \| grep "arp"* , with the associated gc_thres (garbage collection thresholds) viewed with the following command:*grep "" /proc/sys/net/ipv4/neigh/\*/\* \| grep "gc_thres"*
* Show arp cache slab size:  
  `
  # cat /proc/slabinfo | grep "arp"`
* Show neighbour table count:  
  `# ip -s -s neigh show nud all | grep ".*" -c`

## Cause

A leak in the routing table, where the entries are not getting flushed.

## Solution

This problem was fixed. The fix is included in:

* [Jumbo Hotfix Accumulator for R80.30](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk153152) since Take 107
* [Jumbo Hotfix Accumulator for R80.20](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk137592&partition=Basic&product=All) since take 103

For **other [supported](http://www.checkpoint.com/support-services/support-life-cycle-policy/index.html) versions** , Check Point can supply a **Hotfix** . [Contact Check Point Support](https://www.checkpoint.com/support-services/contact-support/) to get a Hotfix for this issue.  
A Support Engineer will make sure the Hotfix is compatible with your environment before providing the Hotfix.  
For faster resolution and verification, please collect [CPinfo files](http://supportcontent.checkpoint.com/solutions?id=sk92739) from the Security Management Server and Security Gateways involved in the case.

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content