> Source: [sk39795](https://support.checkpoint.com/results/sk/sk39795)

# sk39795 - fwlddist_adjust_buf: record too big for sync

| Property | Value |
|----------|-------|
| Solution ID | sk39795 |
| Date Created | 2009-04-14 |
| Last Modified | 2010-11-10 |
| Technical Level | General |
| Products | Security Gateway |
| Versions | R82.10, R82, R81.20 |

## Symptoms

- Check Point FireWall-1 NG FP3 may report errors in /var/log/messages of the type kernel:

> <br />
>
> fwlddist_adjust_buf: record too big for sync. existing space=7fc, requesting 801 more. max=8000
>
<br />

Using Active query view in SmartView Tracker tends to slow down synchronization and may also lead to the error message mentioned above: "record too big for sync"

## Solution

Note: It is highly recommended that the latest HFA for NG FP3 or AI be applied first before attempting to apply this modzap change. Certain improvements to the sync buffer size have already been implemented in NG HFA-313 and above which will help eliminate the error messages indicating the sync buffers are full.

This error message indicates there is a problem with the new sync on the firewall installation. First, check sync status by running the command **fw ctl pstat**. If the output indicates that the status of sync is OK, then ensure you are on least on HFA-308 or higher to perform the modzap changes below (latest HFA can be requested from Nokia support).

Then you can execute the following command:
> nokia\[admin\]# **fw ctl set int fwlddist_buf_size size**

where *size* is a number larger than 8192 (0x2000 in hex, the default for NG FP3 Base). A suggested value to use is 16384 (0x4000 in hex) **. This value is already set to 16384 (hex 0x4000) if using NG FP3 (HFA-313 or later) or NG AI R54 and above**. Note that values for this command must be entered in decimal, not hexadecimal.

This change is temporary. To make the change permanent, download modzap from [KB1610659](https://supportcenter.checkpoint.com/supportcenter/portal/role/supportcenterUser/page/default.psml/media-type/html?action=portlets.SCArticleAction&eventSubmit_doGoviewarticle=&alternateid=kb1610659), execute the following command, and reboot:
>
> nokia\[admin\]# **./modzap _fwlddist_buf_size $FWDIR/boot/modules/fwmod.o 0x4000**
>
In the currently supported Firewall-1 versions i.e NGX R65 and above, the maximum sync buffer size is 64K i.e. 65536 when set from 'fw ctl set int.......' command. In Hex it translates to 0x10000, the value to be used when using modzap.

You should never increase the value of this firewall kernel parameter above the maximum value.

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content
