> Source: [sk160113](https://support.checkpoint.com/results/sk/sk160113)

# sk160113 - Several VPN related kernel tables increase in size only on standby member 

| Property | Value |
|----------|-------|
| Solution ID | sk160113 |
| Date Created | 2019-08-09 |
| Last Modified | 2021-09-23 |
| Technical Level | General |
| Products | Security Gateway |
| Versions | R82.10, R82, R81.20 |
| OS | Gaia |

## Symptoms

- * The following VPN related kernel tables only increase in size on the standby member.  
  * *vpn_queues*
  * *ike2peer*
  * *peer2ike*
  * *ike2esp*

  Note: This can be checked with the following command:  
  *\[Expert@HostName\]#fw tab -t vpn_queues -t ike2peer -t peer2ike -t ike2esp -s*
* Standby member crashes with Vmcore file.

## Cause

Since CoreXL VPN support was introduced, IKE SAs are deleted using a trap to *vpnd* daemon.

If the *vpnds*trap buffer is full, or if it is not running for some reason, the following tables are not cleaned up:

* *vpn_queues*
* *ike2peer*
* *peer2ike*
* *ike2esp*

## Solution

[Contact Check Point Support](https://www.checkpoint.com/support-services/contact-support/) to get a Hotfix for this issue.   
A Support Engineer will make sure the Hotfix is compatible with your environment before providing the Hotfix.   
For faster resolution and verification please collect [CPinfo](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk92739) files from the Security Management and Security Gateways involved in the case.

The hotfix improves the mechanism of IKE SAs deletion without involving VPN or any other user process.

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content