> Source: [sk174823](https://support.checkpoint.com/results/sk/sk174823)

# sk174823 - Services on Security Gateway die or become unresponsive

| Property | Value |
|----------|-------|
| Solution ID | sk174823 |
| Date Created | 2021-08-01 |
| Last Modified | 2021-12-22 |
| Technical Level | General |
| Products | Security Gateway, Security Management Server, Multi-Domain Security Management Server |
| Versions | R82.10, R82, R81.20, R82.10, R82, R81.20, R82.10, R81.20, R82 |
| OS | Gaia |

## Symptoms

- * Check Point services on Security Gateway or Management Station die, or become unresponsive and do not come back after being restarted.

* Confd process is hung or has high cpu.

* */var/log/messages* file has similar logs  

  `
  clish[PID]: is_vsx_enabled: libdb error Timeout waiting for response from database server. `  
  `
  snmpd: Error: Timeout waiting for response from database server. `  
  `
  snmpd: queryHWSensorData: Could not retrieve data from the config database`  
  `
  snmpd: Error: Timeout waiting for response from database server. `  
  `
  monitord[PID]: Error: Timeout waiting for response from database server.`

* The command: ``# ls -l /proc/`pidof confd`/fd | wc -l `` returns a high number (more than 100).

* The output of the command: ``ls -l /proc/`pidof confd`/fd `` is flooded with messages similar to:   

  `lr-x------. 1 admin root 64 Jul 21 08:38 20 -> /sys/bus/pci/devices `

## Cause

There is a file descriptor leak when running command "show asset network" or "show asset all".

When confd reaches 1024 open file descriptors, the machine stops allocating them and any process that calls on confd hangs.

## Solution

This problem was fixed. The fix is included in:

* [Jumbo Hotfix Accumulator for R81](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk170114) starting from Take 34
* [Jumbo Hotfix Accumulator for R80.40](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk165456) starting from Take 114
* [Jumbo Hotfix Accumulator for R80.30](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk153152) starting from Take 235
* [Jumbo Hotfix Accumulator for R80.20](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk137592) starting from Take 202
* [Jumbo Hotfix Accumulator for R80.10](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk116380) starting from Take 298

If you choose not to upgrade, Check Point can supply a **Hotfix** . [Contact Check Point Support](https://www.checkpoint.com/support-services/contact-support/) to get a Hotfix for this issue.  
A Support Engineer will make sure the Hotfix is compatible with your environment before providing the Hotfix.  
For faster resolution and verification, please collect [CPinfo files](http://supportcontent.checkpoint.com/solutions?id=sk92739) from the Security Management Server and Security Gateways involved in the case.

**Hotfix installation instructions:**   
Refer to [sk168597 - How to install a Hotfix](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk168597).

<br />

As a **workaround**, restart confd with:

`tellpm process:confd`

`tellpm process:confd t`

**Note:**Restarting confd will restart routed as well, and impact dynamic routing functions.

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content