Cisco CSS 11000 Series Content Services Switches

Cisco CSS 11000 Series Content Services Switches Running WebNS,, Using HTTP Keepalives Subject to Lock ups

Updated November 7, 2003

October 10, 2003

Products Affected


Random #


All versions running,,


All versions running,,


All versions running,,

Problem Description

Cisco has identified a serious defect introduced in a maintenance release for WebNS 5.00 and 6.10 (2.04 and 1.07 respectively). This defect causes CSS 11000 switches to lock up preventing Telnet and Console access, as well as stopping traffic from passing through the switch. The defect is related to having both head and get or either head or get Hypertext Transfer Protocol (HTTP) keepalives configured and active.


The lock up on the CSS is a race condition that was opened up with the addition of Graceful close, in which the two threads used to conduct the HTTP keepalive would not properly control the order of relinquishing the socket and the database memory. This defect can cause a CSS 11000 running WebNS,, that has http keepalives configured to lock up, preventing telnet, File Transfer Protocol (FTP) , console, debug sessions and traffic.

Problem Symptoms

CSS 11000 running,, stops responding via Telnet, Console and FTP. The CSS 11000 stops passing all traffic, and in some cases all Ethernet Light Emitting Diodes (LEDs) turn amber. The only way to fix the situation is to manually reboot the unit. The system does not create a core file and does not reboot itself.


To bring the CSS back up reboot it manually. However, the condition can reoccur if using HTTP keepalives and running WebNS, Cisco recommends that customers do not load WebNS,

Cisco has posted a fix for this defect. A rebuild of and is available on CCO. The versions are (ap0500309a.adi-gz) and (ap0610107a.adi-gz). They are located on the WebNS Maintenance Release page.


To follow the bug ID link below and see detailed bug information, you must be a registered user and you must be logged in.



CSCec23109 (registered customers only)

CSS lockup running KAL tests

For More Information

If you require further assistance, or if you have any further questions regarding this field notice, please contact the Cisco Systems Technical Assistance Center (TAC) by one of the following methods:

Receive Email Notification For New Field Notices

Product Alert Tool - Set up a profile to receive email updates about reliability, safety, network security, and end-of-sale issues for the Cisco products you specify.