> Source: [sk183948](https://support.checkpoint.com/results/sk/sk183948)

# sk183948 - "rx_length_errors" on Maestro Cluster After Hardware Upgrade

| Property | Value |
|----------|-------|
| Solution ID | sk183948 |
| Date Created | 2025-09-11 |
| Last Modified | 2025-09-25 |
| Technical Level | General |
| Products | Security Gateway, Scalable Platforms |
| Versions | R81.20, R81.20 |
| OS | Gaia |

## Symptoms

- * After a Hardware upgrade on the Maestro cluster (Active/Standby Dual Management, Dual Site, Single Orchestrator per site, 10 Security Group Members), the system reports increasing rx_length_errors by approximately 20,000 per Security Group Member per day.

* The errors began after replacing Security Gateway 6200 hardware with Security Gateway 9100 hardware, which uses 25 Gigabit Direct Attach Copper cables and ports configured for 25 Gigabit.

* Packet captures show malformed packets, but none exceed the Maximum Transmission Unit.
  No customer-facing traffic impact is observed; errors are present only at the Media Access Control layer.

* Aligning Forward Error Correction (FEC) mode does not resolve the issue.

## Cause

The *rx_length_errors* are caused by an issue in the Intel E810 Network Interface Card (NIC) driver (ice) versions lower than 1.14.2.0.  
When a short Ethernet packet is padded to 64 bytes and a VLAN tag is inserted, the Length/Type field may contain a value smaller than the remaining bytes. The driver incorrectly reports this as an Rx length error.  
This issue is cosmetic and does not affect actual traffic or performance.

## Solution

[Contact Check Point Support](https://www.checkpoint.com/support-services/contact-support/) to get a Hotfix for this issue.

A Support Engineer will make sure the Hotfix is compatible with your environment before providing it.  
For faster resolution and verification, collect these files:

1. [CPinfo](https://support.checkpoint.com/results/sk/sk92739) file from the Management Server involved in the case.
2. [CPinfo](https://support.checkpoint.com/results/sk/sk92739) file from the Security Gateway / each Cluster Member / Security Group involved in the case.

**Hotfix installation instructions:**   
Refer to [sk168597 - How to install a Hotfix](https://support.checkpoint.com/results/sk/sk168597).

After the Hotfix installation:

1. Verify Driver Version:

   Run this command on the Security Gateway:

   ethtool -i \<port\>

   Make sure the driver version is 1.14.2.0 or higher.
2. Monitor for Errors:  
   Use the `ethtool -S <interface>` or `cpview` commands to monitor *rx_length_errors*, and make sure that the number does not increase.

If the appliance runs the updated driver, no further action is required.

If the appliance runs a driver version earlier than 1.14.2.0, and upgrade is not immediately possible, you can safely ignore these errors. They are cosmetic and do not impact network functionality or performance.

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content