Table Of Contents
Using the CSS Logging Features
Logging Overview
Logging Quick Start Table
Specifying Logging Buffer Size
Specifying Log File Destination
Specifying a Log File on the Disk
Disabling Logging to the sys.log File on Disk
Specifying Host for a Log File Destination
Specifying a Line for a Log File Destination
Enabling Logging on a Subsystem
Disabling Logging for a Subsystem
Configuring a Log Message for a Subsystem at a Logging Level
Logging ACL Activity
Sending Log Messages to an Email Address
Logging CLI Commands
Showing Log Files
Showing Log Activity
Showing Log Lists
Showing Log State
Copying Log Files to an FTP or TFTP Server
Copying Log Files to an FTP Server
Copying Log Files to a TFTP Server
Interpreting sys.log Log Messages
Frequently Queried Log Messages
Where to Go Next
Using the CSS Logging Features
This chapter describes how to enable logging, set up the log buffer, determine where to send the activity information, and display and interpret log messages. Information in this chapter applies to all CSS models, except where noted.
This chapter contains the following sections:
•
Logging Overview
•
Specifying Logging Buffer Size
•
Specifying Log File Destination
•
Enabling Logging on a Subsystem
•
Logging CLI Commands
•
Showing Log Files
•
Copying Log Files to an FTP or TFTP Server
•
Interpreting sys.log Log Messages
•
Frequently Queried Log Messages
Logging Overview
The CSS generates log messages to assist you in debugging and monitoring it. By default, the CSS saves boot and subsystem event log messages to log files on its hard or flash disk. The content of these files is recorded in ASCII text. You can also configure the CSS to send log messages to an active CSS session, e-mail address, or another host system.
Note
The maximum size of a log file is 50 MB for hard disk-based systems, and 10 MB for flash disk-based systems.
The boot log messages are the result of the boot process. The CSS saves these messages in the boot.log file.
The subsystem log messages are subsystem events that occur during the operation of the CSS. The CSS saves these messages in the sys.log file. The CSS creates this file when the first loggable subsystem event occurs. The CSS determines which subsystem messages to log by its configured logging level. By default, the CSS logs events on all subsystems with a level of warning. The warning level designates that the CSS logs fatal, alert, critical, error, and warning messages for the subsystem.
You have the option to log subsystem messages at a different level than the default warning level. The level you specify instructs the CSS to log subsystem activity that occurs at that level and the activity greater than that level.
In addition to informational messages, the CSS also logs notice, warning, error, critical, alert, and fatal messages.
Note
You can display or copy a log file using the show log or copy log command, respectively. For details on the show log command, see "Showing Log Files" later in this chapter. For details on the copy log command, see "Copying Log Files to an FTP or TFTP Server" later in this chapter. You need SuperUser privileges to use the show log command.
The CSS provides logging capabilities for debugging and system monitoring by generating the log files described in Table 5-1.
Table 5-1 CSS Log File Descriptions
Log File
|
Log File Destination
|
Records
|
Default Location
|
Alternate Location
|
Boot.log
|
Hard disk and console or flash disk and console
|
None
|
Results of the boot process.
|
Boot.bak
|
Hard disk and console or flash disk and console
|
None
|
Backup of a boot log file. Each time you reboot the CSS, the software renames the current boot log file to boot.log.prev and starts a new boot log file. The CSS overwrites an existing backup boot log file when a boot log file is renamed.
|
Sys.log
|
Hard disk or flash disk
|
Console syslogd VTY1 VTY2
|
Log information for user-defined subsystem or CLI commands. By default, logging is enabled and logs subsystem all with level warning. The CSS creates sys.log to record this log information.
|
Sys.log.prev
|
Hard disk or flash disk
|
Console syslogd VTY1 VTY2
|
Backup of a system log file. When a system log file reaches its maximum size (50 MB, for a hard disk-based CSS; 10 MB, for a flash disk-based CSS), the software renames the system log file to sys.log.prev and starts a new system log file. The CSS overwrites an existing backup system log file when a system log file is renamed. When you reboot a CSS, the software continues to use the existing system log file until it reaches its maximum size.
|
Logging Quick Start Table
If you are familiar with the CSS logging functions, see Table 5-2 for the commands and command options required to configure and enable logging. For detailed information on the CSS logging functions, see the sections following Table 5-2.
Note
Configure all logging commands from config mode except for the clear log command. The clear log command is available in SuperUser mode at the root prompt (#).
Table 5-2 Configuring and Enabling Logging
Step
|
Logging Option
|
Example
|
1. Specify the disk buffer size.
|
size - Size of the disk buffer (0 to 64000)
|
logging buffer 1000
|
2. Specify the destination (disk, host, line) where you wish to log subsystem activity.
|
disk filename - New or existing filename in the log directory
host ip or host - IP address of the syslog daemon on the host or a host name
log line - CSS active session
|
logging disk stubs
logging host 192.168.11.3
logging host myhost.domain.com
logging line vty1
|
3. Select a CSS subsystem and determine which type of activity to log (default all) and level (default warning).
|
subsystem - Valid subsystems:
acl, all, app, boomerang, buffer, cdp, chassis, circuit, csdpeer, dhcp, dql, fac, flowagent, flowmgr, fp-driver, hfg, ipv4, keepalive, netman, netmgr, nql, ospf, pcm, portmapper, proximity, publish, radius, redundancy, replicate, rip, security, ssl-accel, slr, sntp, syssoft, urql, vlanmgr, vpm, vrrp, wcc
level - Valid levels:
fatal-0, alert-1, critical-2, error-3, warning-4, notice-5, info-6, debug-7
|
logging subsystem rip level alert-1
|
4. Optionally, enable the CSS to send log messages to an email address and specify a level.
|
sendmail email address of mail recipient
IP address or hostname of SMTP host
level - Valid levels:
fatal-0, alert-1, critical-2, error-3, warning-4, notice-5, info-6, debug-7
|
logging sendmail us@arrowpoint.com 172.3.6.58 critical
|
5. Show the log file.
|
filename - Log file to display
|
show log stubs
|
Specifying Logging Buffer Size
The logging buffer size is the amount of information the CSS buffers in memory before outputting the information to disk. The larger you configure the buffer size, the less frequently the CSS outputs the contents to disk. Specifying a buffer size is required only if you configure logging to disk.
To set the disk buffering size, use the logging buffer command. Specify the buffer size from 0 to 64,000 bytes. The default is 0, where the CSS sends the logging output directly to the log file.
To set the buffer size to 1000 bytes, enter:
(config)# logging buffer 1000
To send the logging output directly to the log file, enter:
(config)# no logging buffer
Specifying Log File Destination
To specify a destination where the CSS logs subsystem activity, use the logging command. You can specify the following locations for log files:
•
disk filename - New or existing filename in the disk log directory
•
host ip or host - IP address of the syslog daemon on the host or a host name
•
log line - CSS active session
For information on logging to these destinations, see the following sections.

Note
If logging requires frequent writes to disk (that is, several hundred log messages per day), the most reliable configuration is to log to a hard disk and store all other system files on a flash disk. Although flash disks generally provide the most reliable way to store information over time, hard disks endure frequent writes to disk better than the flash disks currently available.
To prevent excessive writes to the CSS disk, consider disabling logging to the sys.log file on disk (see "Disabling Logging to the sys.log File on Disk"). If desired, you can continue sending CSS log information to the sys.log file at an alternate location. To do this, use either the logging host command to send log information to a syslog daemon on a host system (see "Specifying Host for a Log File Destination") or the logging line command to send (but not save) log information to an active CSS line (see "Specifying a Line for a Log File Destination").

Caution 
Logging to a CSS disk causes the performance of the CSS to degrade.
Specifying a Log File on the Disk
To send log information to specific file on the CSS disk, use the logging disk command and specify a log filename. The filename can be new or existing. Enter a text string from 0 to 32 characters.
For example:
(config)# logging disk stubs
When you enter this command, the CSS:
•
Stops writing default log information to the sys.log file
•
Creates the filename you specify in the disk log directory
•
Sends subsystem and level information to the log filename
You can have only one active log file on the disk at a time. If you wish to send subsystem information to a different log file on the disk, reenter the logging disk command with a different filename.
Caution 
Logging to a CSS disk causes the performance of the CSS to degrade.
To stop logging to the specified file and reenable logging to the sys.log file on the CSS, enter:
(config)# no logging disk
Disabling Logging to the sys.log File on Disk
To disable logging to the sys.log file on the CSS disk (hard or flash), use the logging to-disk command. Disabling logging to the sys.log file is useful when you want to prevent excessive writes to the CSS disk (for example, to the flash disk) or to increase the performance of the CSS.
Note
You can continue sending CSS log information to the sys.log file at an alternate location. To do this, use either the logging host command to send log information to a syslog daemon on a host system (see "Specifying Host for a Log File Destination") or the logging line command to send (but not save) log information to an active CSS line (see "Specifying a Line for a Log File Destination").
The options for the logging to-disk command are:
•
logging to-disk disable - Disables writing default log information to the CSS sys.log file on the CSS disk.
Note
The logging to-disk disable command affects the sys.log file only, and does not affect a disk log file that was specified through the logging disk command. You can still use the logging disk filename command to send log information to a specific filename on the CSS disk. To disable all logging to the CSS disk, first enter the no logging disk command and then enter the logging to-disk disable command. Be aware that if you enter the no logging disk command the CSS does not reenable logging to the sys.log file. You must enter the logging to-disk enable command to reactivate the sys.log file.
•
logging to-disk enable - Resets logging back to disk and resumes writing default log information to the CSS sys.log file.
Note
You are prompted to reboot the CSS after issuing the logging to-disk disable or logging to-disk enable commands for the command to take effect.
To disable logging to the CSS sys.log file on the CSS disk (flash disk or hard disk), enter:
(config)# logging to-disk disable
To resume logging back to the CSS disk, enter:
(config)# logging to-disk enable
Specifying Host for a Log File Destination
To send log information to a syslog daemon on the host system, use the logging host command and specify:
•
An IP address or a host name - The address of the syslog daemon on the host. Enter the IP address in dotted-decimal notation (for example, 192.168.11.1) or the mnemonic host name (for example, myhost.mydomain.com).
•
facility number - The syslog daemon facility level. Facilities are considered to be service areas, such as printing, e-mail, or network. Enter a number from 0 to 7. For more information on the syslog daemon and facility levels, refer to your syslog daemon documentation.
•
log-level number - Specifies the level of the CSS subsystem log messages to be sent to the syslog daemon on the host. Enter a subsystem log-level from 0 to 7, which correspond to the following logging levels:
0 (fatal-0), 1 (alert-1), 2 (critical-2), 3 (error-3), 4 (warning-4), 5 (notice-5), 6 (info-6), and 7 (debug-7) (default).
The logging host log-level number must be equal to or less than the log level you configure for the logging subsystem command (see the "Enabling Logging on a Subsystem" section). If the log-level is less than the logging subsystem level, the CSS only sends the message level specified in the log-level option. If the log-level is greater than the logging subsystem level, the CSS only sends the level of messages specified in the logging subsystem command.
The CSS continues to send log information to the sys.log file on the CSS disk (hard or flash) when the logging host command is entered. To disable logging to the sys.log file on the CSS disk, use the logging to-disk disable command.
For example:
(config)# logging host 192.168.11.1 facility 3 log-level 3
To turn off logging to a host, enter:
(config)# no logging host
Specifying a Line for a Log File Destination
To send log information to an active CSS session, use the logging line command and specify a valid log line on the CSS. Enter the line as a case-sensitive text string with a maximum of 32 characters.
Note
The CSS continues to send log information to the sys.log file on the CSS disk (hard or flash) even when the logging line command is entered. To disable logging to the sys.log file on the CSS disk, use the logging to-disk disable command.
To display a list of active CSS lines, enter the logging line command as shown. The * denotes your current session.
console Login Name: Location:local
*vty1 Login Name: admin Location:10.0.3.35
To send subsystem information to your monitor, enter:
(config)# logging line vty1
To turn off logging, enter the no logging line command.
(config)# no logging line vty1
Enabling Logging on a Subsystem
Use the logging subsystem command to select a CSS subsystem and determine which type of activity to log. The level you specify instructs the CSS to log subsystem activity that occurs at that level and the activity greater than that level. For example, if you wish to log info messages, the CSS also logs error, critical, alert, and fatal error levels.
The following example enables logging for the chassis subsystem with a critical-2 error level. The CSS logs all critical, alert, and fatal errors for the chassis.
(config)# logging subsystem chassis level critical-2
Table 5-3 defines the CSS subsystems for which you can enable logging.
Table 5-3 Logging Subsystems
Subsystem
|
Definition
|
acl
|
Access Control List (ACL)
|
all (default)
|
All CSS subsystems
|
app
|
Application Peering Protocol (APP)
|
boomerang
|
DNS Content Routing Agent (CRA)
|
buffer
|
Buffer manager
|
cdp
|
Cisco Discovery Protocol (CDP)
|
chassis
|
Chassis manager
|
circuit
|
Circuit manager
|
csdpeer
|
Content Server Database (CSD) peer
|
dhcp
|
Dynamic Host Configuration Protocol (DHCP)
|
dql
|
Domain Qualifier List (DQL)
|
fac
|
Flow Admission Control (FAC)
|
flowagent
|
Flow Agent
|
flowmgr
|
Flow manager subsystem
|
fp-driver
|
Fathpath Driver
|
hfg
|
Header Field Group (HFG)
|
ipv4
|
Internet Protocol version 4 (IPv4)
|
keepalive
|
Keepalive
|
natmgr
|
NAT Manager
|
netman
|
Network management
|
nql
|
Network Qualifier List (NQL)
|
ospf
|
Open Shortest Path First (OSPF)
|
pcm
|
Proximity CAPP Messaging (PCM)
|
portmapper
|
Port Mapper
|
proximity
|
Proximity
|
publish
|
Publish
|
radius
|
Remote Authentication Dial-In User Server (RADIUS)
|
redundancy
|
CSS redundancy
|
replicate
|
Content replication
|
rip
|
RIP
|
security
|
Security manager
|
ssl-accel
|
Secure Socket Layer (SSL) Acceleration
|
slr
|
Session Level Redundancy
|
sntp
|
Simple Network Time Protocol (SNTP)
|
syssoft
|
System software
|
urql
|
Uniform Resource Locator Qualifier List (URQL)
|
vlanmgr
|
VLAN manager
|
vpm
|
Virtual pipe manager
|
vrrp
|
Virtual Router Redundancy Protocol
|
wcc
|
Web conversation control
|
Table 5-4 defines the logging levels you can set for a CSS subsystem. The logging levels are listed in order of severity with a fatal error being the most severe and info being the least severe error.
Table 5-4 Subsystem Logging Levels
Level
|
Definition
|
fatal-0
|
Fatal errors only.
|
alert-1
|
Alert errors, including fatal errors.
|
critical-2
|
Critical errors, including alert and fatal errors. The following trap events log at the critical level: link down, cold start, warm start, service down, service suspended.
|
error-3
|
General errors, including critical, alert, and fatal errors.
|
warning-4 (default)
|
Warning messages, including all lower levels (error, critical, alert, and fatal.
|
notice-5
|
Notice messages, including all trap events (except for events logged at critical) and all lower levels except for info and debug.
|
info-6
|
Informational messages, including all lower levels except for debug.
|
debug-7
|
Debug messages, including all other error levels. The debug-7 log level may degrade the performance of the CSS. When you enter this option, the CSS prompts you with the following message:
Logging at the debug level may degrade the CSS
performance. Continue, [y/n]:
Enter y to verify that you want to set the log level to debug-7. Enter n to cancel the executing of the debug-7 log level.
|
Disabling Logging for a Subsystem
To reset logging for a subsystem to the default logging level (warning-4), enter the no version of the logging command. For example:
(config)# no logging subsystem redundancy
Configuring a Log Message for a Subsystem at a Logging Level
Use the cliLogMessage subsystem command to define a log message for a subsystem at a particular logging level. The syntax for this global configuration mode command is:
cliLogMessage subsystem name "message" level level
The variables are:
•
name - The name of a CSS subsystem. Enter one of the following subsystem names:
–
acl - Access Control Lists
–
all - all subsystems
–
app - Application Peering Protocol (APP)
–
boomerang - DNS Content Routing Agent
–
buffer - Buffer Manager
–
cpd - Cisco Discovery Protocol (CDP)
–
chassis - Chassis Manager
–
circuit - Circuit Manager
–
csdpeer - Content Server Database (CSD) Peer
–
dhcp - Dynamic Host Configuration Protocol (DHCP)
–
dql - Domain Qualifier List (DQL)
–
fac - Flow Admission Control (FAC)
–
flowagent - Flow Agent
–
flowmgr - Flow Manager
–
fp-driver - Fathpath Driver
–
hfg - Header Field Group (HFG)
–
ipv4 - Internet Protocol version 4
–
keepalive - Keepalive
–
natmgr - NAT Manager
–
netman - Network Management
–
nql - Network Qualifier List (NQL)
–
ospf - Open Shortest Path First (OSPF)
–
pcm - Proximity CAPP Messaging (PCM)
–
portmapper - PortMapper
–
proximity - Proximity
–
publish - Publish
–
radius - Remote Authentication Dial-In User Server (RADIUS)
–
replicate - Replication
–
redundancy - CSS redundancy
–
rip - RIP
–
security - Security Manager
–
slr - Session Level Redundancy
–
sntp - Simple Network Time Protocol (SNTP)
–
ssl-accel - Secure Socket Layer (SSL) Acceleration
–
syssoft - System software
–
urql - Uniform Resource Qualifier List
–
vlanmgr - VLAN Manager
–
vpm - Virtual Pipe Manager
–
vrrp - Virtual Router Redundancy Protocol
–
wcc - Web Conversation Control
To see a list of subsystems, enter:
cliLogMessage subsystem ?
•
level - The log level for the message. Enter one of these levels:
–
fatal-0 - Fatal errors only
–
alert-1 - Alert errors, including errors at the fatal-0 level
–
critical-2 - Critical errors, including errors at the alert-1 level
–
error-3 - Error errors, including errors at the critical-2 level
–
warning-4 - Warning errors (default), including errors at the error-3 level
–
notice-5 - Notice messages, including errors at the warning-4 level
–
info-6 - Informational messages, including errors at the notice-5 level
–
debug-7 - All errors and messages
Logging ACL Activity
When you configure the CSS to log ACL activity, it logs the event of the packet matching the clause and ACL. The CSS sends log information to the location you specified in the logging command.
Note
Before you configure logging for a specific ACL clause, ensure that global ACL logging is enabled. To globally enable ACL logging, use the logging subsystem acl level debug-7 command in config mode.
To configure logging for an ACL clause:
1.
Enter the ACL mode for which you want to enable logging.
2.
Enable logging for:
•
A new clause by entering the log option at the end of the clause. For example:
(config-acl[7])# clause 1 deny udp any eq 3 destination any
eq 3 log
•
An existing clause by using the clause log enable command:
(config-acl[7])# clause 1 log enable
To disable ACL logging for a specific clause, enter:
(config-acl[7])#) clause 1 log disable
To globally disable logging for all ACL clauses, enter:
(config)# no logging subsystem acl
Sending Log Messages to an Email Address
To send the log activity of a subsystem to an email address, use the logging sendmail command. The syntax for this global configuration mode command is:
logging sendmail email_address ip_address level
The variables are:
•
email_address - The email address for the recipient. Enter the email address as an unquoted text string with a length of 1 to 30 characters.
•
IP_address - The IP address for the SMTP host. Enter the IP address in dotted-decimal notation (for example, 192.168.11.1).
•
level - The type of information to log. The valid levels are defined in Table 5-4.
•
domain - The domain name for the SMTP host. Enter an unquoted text string with a maximum length of 64 characters (for example, arrowpoint.com). Do not insert an @ sign before the domain name. The CSS automatically prepends it to the domain name.
To turn off logging to an email address, enter:
(config)# no logging sendmail email_address
Logging CLI Commands
When you want to keep track of all CLI commands entered from the CSS, you can log them to the sys.log file. To log the CLI commands:
1.
Set the logging level of the netman subsystem to info-6. Enter:
(config)# logging subsystem netman info-6
2.
Enable logging of commands through the logging commands enable command. This command logs each CLI command to the sys.log file. Enter:
(config)# logging commands enable
To disable logging CLI commands to the sys.log file, enter:
(config)# no logging commands
Showing Log Files
Use the show log command to display the contents in a log or trap log file. You need SuperUser privileges to use the show log command.
The options for this command are:
•
show log - Send the log activity to your current session, or display the contents in a log or a trap log file.
•
show log-list - Display a list of all log files.
•
show log-state - Display the state of logging for CSS facilities.
Note
When you use the show log command to send the log activity to your current session, and you want to stop sending log activity, press any key on the terminal or workstation. The show log command performs the same function as (config) logging line. Note that you cannot run these commands at the same time.
Showing Log Activity
Use the show log command and its options to send the log activity to your current session, or to display the contents in a log or trap log file. You need SuperUser privileges to use the show log command. The syntax for the show log command is:
show log {log_filename {tail lines} {line-numbers}}
The options and variables for the show log command include:
•
log_filename - The name of the log file. Enter an unquoted text string with no spaces. To see a list of log files with their dates, enter:
•
tail lines - Display the bottom and most recent portion of the log file. The CSS displays the log file starting from the beginning of the file, with the top of the file listing the older messages and the bottom listing the most recent messages. You can specify the number of lines to display (to a maximum of 1000 lines), starting at the end of the log file. Enter a number from 1 to 1000.
•
line-numbers - Include the line numbers when displaying the contents of the log file.
•
traplog - Display all SNMP traps that have occurred. A trap log file is an ASCII file in the log directory containing generic and enterprise traps. By default, the following events generate level critical-2 messages:
–
Link Up
–
Link Down
–
Cold Start
–
Warm Start
–
Service Down
–
Service Suspended
All other SNMP traps generate level notice-5 messages.
Note
When traps are disabled, the CSS still produces a log message for any event that would normally generate a trap.
To send the log activity to your current session, enter:
Press any key to abort...
APR 14 16:28:09 5/1 2398 NETMAN-7: HTTPC:HTTPC_Open:
ERROR->connect <-1,0> <192.20.1.7> <80>
APR 14 16:28:15 5/1 2399 NETMAN-7: HTTPC:HTTPC_Open:
ERROR->connect <-1,0> <192.20.1.7> <80>
APR 14 16:28:21 5/1 2400 NETMAN-7: HTTPC:HTTPC_Open:
ERROR->connect <-1,0> <192.20.1.7> <80>
APR 14 16:28:27 5/1 2401 NETMAN-7: HTTPC:HTTPC_Open:
ERROR->connect <-1,0> <192.20.1.7> <80>
To display information in a specific log file, enter the show log command with a valid log filename. For example:
SEP 22 09:59:18 5/1 918 NETMAN-7: SNMP:SET RSP (3803)
SEP 22 09:59:53 5/1 919 NETMAN-7: SNMP:SET (3804)
SEP 22 09:59:53 5/1 920 NETMAN-7: SNMP: 1
apLogHostIpAddress.[1.2.3.4] VT_IPADDRESS <1.2.3.4>
SEP 22 09:59:53 5/1 921 NETMAN-7: SNMP: 2
apLogHostIpAddress.[1.2.3.4] VT_IPADDRESS <1.2.3.4>
To view the content of the sys.log file, enter:
(config)# show log sys.log
To view the bottom and most recent portion of the file, use the tail option with the show log command. To view the most recent 500 lines in the sys.log file, enter:
(config)# show log sys.log tail 500
Showing Log Lists
Use the show log-list command to display a list of all log files. For example:
Showing Log State
Use the show log-state command to display the state of logging for CSS facilities. For example:
Table 5-5 describes the fields in the show log-state output.
Table 5-5 Field Descriptions for the show log-state Command
Field
|
Description
|
Subsystems:
|
acl
|
Access Control List (ACL)
|
app
|
Application Peering Protocol (APP)
|
boomerang
|
DNS Content Routing Agent (CRA)
|
buffer
|
Buffer manager
|
cdp
|
Cisco Discovery Protocol (CDP)
|
chassis
|
Chassis manager
|
circuit
|
Circuit manager
|
csdpeer
|
Content Server Database (CSD) peer
|
dhcp
|
Dynamic Host Configuration Protocol (DHCP)
|
dql
|
Domain Qualifier List (DQL)
|
fac
|
Flow Admission Control (FAC)
|
flowagent
|
Flow Agent
|
flowmgr
|
Flow manager subsystem
|
fp-driver
|
Fathpath Driver
|
hfg
|
Header Field Group (HFG)
|
ipv4
|
Internet Protocol version 4 (IPv4)
|
keepalive
|
Keepalive
|
natmgr
|
NAT Manager
|
netman
|
Network management
|
nql
|
Network Qualifier List (NQL)
|
ospf
|
Open Shortest Path First (OSPF)
|
pcm
|
Proximity CAPP Messaging (PCM)
|
portmapper
|
Port Mapper
|
proximity
|
Proximity
|
publish
|
Publish
|
radius
|
Remote Authentication Dial-In User Server (RADIUS)
|
redundancy
|
CSS redundancy
|
replicate
|
Content replication
|
rip
|
RIP
|
security
|
Security manager
|
ssl-accel
|
Secure Socket Layer (SSL) Acceleration
|
slr
|
Session Level Redundancy
|
sntp
|
Simple Network Time Protocol (SNTP)
|
syssoft
|
System software
|
urql
|
Uniform Resource Locator Qualifier List (URQL)
|
vlanmgr
|
VLAN manager
|
vpm
|
Virtual pipe manager
|
vrrp
|
Virtual Router Redundancy Protocol
|
wcc
|
Web conversation control
|
acl
|
Access Control List (ACL)
|
all (default)
|
All CSS subsystems
|
app
|
Application Peering Protocol (APP)
|
Levels:
|
debug
|
Log all errors and messages (Verbose)
|
info
|
Log informational messages, including errors at the notice level
|
notice
|
Log notice messages, including errors at the warning level
|
warning
|
Log warning errors (default), including errors at the error level
|
error
|
Log error errors, including errors at the critical level
|
critical
|
Log critical errors, including errors at the alert level
|
alert
|
Log alert errors, including errors at the fatal level
|
fatal
|
Log fatal errors only (Quiet)
|
Lines
|
Lists the connected sessions (CSS 11800 only)
|
File:
|
Filename:
|
The name of the log file
|
Current size:
|
The current size of the log file
|
Log to Disk
|
Identifies if logging to disk (flash disk or hard disk) is enabled or disabled.
|
Copying Log Files to an FTP or TFTP Server
To copy log files from the CSS to a File Transfer Protocol (FTP) or Trivial File Transfer Protocol (TFTP) server, use the copy log command. The copy log command is available at the SuperUser prompt.
The options for this command are:
•
copy log log_filename ftp
•
copy log log_filename tftp
To see a list of log files, enter the copy log ? command.
Copying Log Files to an FTP Server
To copy a log file to an FTP server, use the copy log ftp command. Before you copy a log file from the CSS to an FTP server, you must create an FTP record file containing the FTP server IP address, username, and password. For information on configuring an FTP record, refer to Chapter 1, Logging In and Getting Started.
The syntax is:
copy log logfilename ftp ftp_record filename
For example:
# copy log starlog ftp ftpserv1 starlogthurs
The variables are:
•
logfilename - The name of the log file on the CSS. Enter an unquoted text string with no spaces and a maximum of 32 characters.
•
ftp_record - The name of the FTP record file that contains the FTP server IP address, username, and password. Enter an unquoted text string with no spaces and a maximum of 16 characters..
•
filename - The name you want to assign to the file on the FTP server. Include the full path to the file. Enter an unquoted text string with no spaces and a maximum of 32 characters.
Copying Log Files to a TFTP Server
To copy a log file to an TFTP server, use the copy log tftp command.
The syntax is:
copy log logfilename tftp IP address or hostname filename
The variables are:
•
logfilename - The name of the log file on the CSS. Enter an unquoted text string with no spaces and a maximum of 32 characters.
•
IP address or hostname - The IP address or host name of the TFTP server to receive the file. Enter an IP address in dotted-decimal notation (for example, 192.168.11.1) or in mnemonic host-name format (for example, myhost.mydomain.com). If you wish to use a hostname, you must first set up a host table using the (config) host command.
•
filename - The name you want to assign to the file on the TFTP server. Include the full path to the file. Enter an unquoted text string with no spaces and a maximum of 32 characters.
Interpreting sys.log Log Messages
The following is an example of a sys.log message. This section uses this example to describe the parts of a log message.
FEB 16 14:01:13 5/1 2453 VLANMGR-7: Transmit sfm STP BPDU on bPort 1,
egressLp 0x1f00 VlanLpSend() ret:0
A log message consists of the following components:
•
The time stamp indicates when the log message event occurred. In this example, the time stamp is FEB 16 14:01:13.
•
The physical interface indicates where the event occurred in the CSS. For a CSS 11501, CSS 11050, or CSS 11150, it indicates the interface port format (for example, e2). For a CSS 11503, CSS 11506, or CSS 11800, it indicates the slot/port (for example, 3/1).
•
The counter records the incremental occurrence of each message. The count of this message is 2,453.
•
The subsystem name and level is the CSS subsystem assigned to the message and the level of the message. Because this example is a subsystem message, the subsystem is the VLAN Manager and the log level is 7, which is a debug level (VLANMGR-7). See "Enabling Logging on a Subsystem" earlier in this chapter for a list of CSS subsystems.
•
The log message indicating the event the occurred. The remaining string in the example is the event that occurred.
Transmit sfm STP BPDU on bPort 1, egressLp 0x1f00 VlanLpSend()
ret:0
Note
You can define a log message for a subsystem at a particular logging level through the cliLogMessage subsystem command. For more information, see "Configuring a Log Message for a Subsystem at a Logging Level" earlier in this chapter.
Frequently Queried Log Messages
Table 5-6 lists CSS log messages that users frequently query. This table includes information on the possible cause and corrective action, if required. The table lists messages alphabetically. The listed subsystem log messages are listed starting from the subsystem field.
Table 5-6 Log Messages
Log Message (sys.log: Subsystem Name, Level, and Message)
|
Cause and Resolution
|
BootRom...booting ... Locked
boot flash.
Validating operational boot
flash, please wait...
Operational boot flash valid.
Jumping to operational boot
flash.
... Operational boot flash.
Version <number> Build <#> PN:
Rev: . SN: Master SCM Running
POST Diagnostics
<2><3><4><6><7><8><... POST
Diagnostics PASSED Booting into
Offdm image at 0xbfd80000
Reading configuration
records...OK Checking previous
shutdown..OK Initializing the
disk...
ERROR: ATA device reports error
status register = 127error
register = 127 piDiagnose()
ERROR: semaphore take failure
semStatus = -1 status register
= 127 error register = 127
WARNING: IDE Disk 0 PIO Mode
initialization piDrv() failed!
WARNING: PiFsInit() could not
create Block device for IDE
disk! FAILED
|
The disk device driver timed out waiting for a response from the disk drive during its initialization. The message typically means that the disk is absent from the SCM, but could mean that the disk itself is unresponsive.
Make sure that the disk is located in slot 0. If it is, try removing and reinstalling it, then reboot the CSS.
|
CHMGR: Missing backup power
supply.
(11500 Series CSS Only)
|
The power supply lost AC power from the source. A CSS 11501 and CSS 11503 contains one power supply. The CSS 11506 contains up to three power supplies, but requires two functioning power supplies to guarantee service. If the following message appears before these messages, then you can assume that the problem is with the AC power source, not the power supply.
CHMGR: Cannot locate power supply:
PSnumber.
The PSnumber variable indicates which power supply cannot be found or has failed.
To determine whether the CSS 11500 series power supplies are working properly, both LEDs on the front of each power supply should be lit.
|
CHMGR: Cannot locate power
supply: PSnumber.
|
The CSS chassis is not able to find the power supply. A CSS 11501 and CSS 11503 contains one power supply. The CSS 11506 contains up to three power supplies but requires two functioning power supplies to guarantee service. The PSnumber variable indicates which power supply cannot be found or has failed. If you know that the power source is supplied to the chassis and correctly flowing to it, then the problem may be the power supply.
To determine whether the CSS 11500 series power supplies are working properly, both LEDs on the front of each power supply should be lit.
|
CHM-1: CHMGR: Missing backup
power supply.
(11000 Series CSS Only)
|
The power supply lost AC power from the source. If the following message appears before these messages, then you can assume that the problem is with the AC power source, not the power supply.
CHM-1: CHMGR: Cannot locate power
supply: PS2.
To determine whether both power supplies are working properly, both green LEDs should be lit on the front of the active SCM in the CSS 11506.
|
CHM-1: CHMGR: Cannot locate
power supply: PS2.
CHM-1: CHMGR: Cannot locate
power supply: PS1.
|
The CSS chassis is not able to find the power supply. If you know that the power source is supplied to the chassis and correctly flowing to it, then the problem may be the power supply.
To determine whether both power supplies are working properly, both green LEDs should be lit on the front of the active SCM in the CSS 11506.
|
CIRCUIT-7: Circuit status
message for circuit 1023 sent
to CE 20202c01 cause code is 7
|
Cause codes indicate the status of interfaces within VLANs. The logical port cause and command codes are as follows:
Cause Code
CM_CIRCUIT_CREATED 1 CM_IP_REGISTER 2 CM_IP_NOT_REGISTER 3 CM_IP_MODIFIED 4 CM_LP_STATE_CHG 5 CM_CIRCUIT_REMOVED 6 CM_LP_ADDED 7 CM_LP_REMOVED 8 CM_LP_MODIFIED 9 CM_LP_FAILOVER 10 CM_CIRCUIT_DOWN 11
This log message indicates that a port is added to the VLAN. This can occur when the association to a VLAN changes as the port goes up and down.
Use the show circuit command to list the VLANs. Check the status of the ports of the VLAN or determine whether the VLAN is active.
|
CSDPEER-7: LR Send list too
small !!!
|
The number of domain names being sent by the peer exceeds the size of the CSS list. You can configure this parameter through the (config) dns-peer command. Cisco Systems recommends that you configure the receive and send slots with the same value. The default slot value is 255.
|
FLOWMGR-7: Exceeded outflow SYN
count
|
For a Layer 5 rule, the CSS is trying to establish a connection with the backend server. The CSS sent four SYNs to the backend server and did not get a response.
For the CSS to attempt to establish a connection with the backend server then on the front side, the CSS saw:
SYN-> <-SYN/ACK ACK-> GET->
Only after receipt of the GET, the CSS opens up the backend connection and the log message is generated.
When several of these messages occur, this may indicate a bad server. This could be from keepalives, or from regular TCP HTTP traffic. Make sure that the port 80 sockets are not full on the servers.
|
FLOWMGR-4: Flow manager
received an illegal message
with code 10
|
One of the ports received an exceeding number of invalid packets and overflowed the fastpath. The flow manager received a control message from the fastpath that was badly formatted. Either it is intermittent hardware and the fastpath is corrupting the packets, or the fastpath is getting streams of invalid packets and some are leaking up to the flow manager.
Use the show ether-errors command to display information for a port with many errors. Try disconnecting the port or changing ports and determine if the errors stop. Note that all code numbers have the same meaning.
|
IPV4-4:Ipv4IfMgrCctUpdateMsg:
IF config for circuit 1015 not
found
CIRCUIT-4: Error, Circuit 1015
does not exist.
|
A removed circuit is still configured to an ACL or another configuration parameter. Check the CSS configuration.
|
IPV4-4: Ipv4ReceivePacket: out
of mbufs
|
An mbuf is a data structure in BSD UNIX-based IP stacks (such as the VxWorks stack) that is used for buffering. This indicates that the CSS received a packet that was addressed to one of the CSSs IP addresses, and when attempting to send it up the VxWorks IP stack, it had no buffers left.
Note These buffers are separate from those used for flow setup and forwarding purposes. They are only used when the traffic is sent to the CSS itself, (for example, Telnet session).
If you receive this message, contact Cisco Systems customer support.
|
IPV4-4: Ipv4SfmArpTx: unknown
circuit in buffer (2001)
|
An ARP TX task is running on the SFM, receiving packets from the SFM, and transmitting them to the proper egress ports. This message includes the circuit number (2001 in this example). If the circuit number for this ARP was down or inactive while the ARP was still being queued in the SFM, the message would appear in the log. An action caused the circuit to be removed while data for that circuit was still in the buffer.
Determine if either all physical interfaces in a circuit VLAN are going up and down, or a configuration change occurred on the VLAN at the time of the message.
|
IPV4-4: Ipv4SfmForwRx: bad IP
version received (0)
|
The IPV4 receive task received a packet and the IP version is displayed in the parenthesis (). The CSS discards anything that is not Ipv4 Version 4. In this example, it was version 0. If you see many of these messages, it could be a misconfigured device or a DoS attack.
|
KAL-7: kal_ServiceNotify:
kalIndex = 24 kalSvcEvent=3
KAL-7: kal_ServiceNotify:
kalIndex = 31 kalSvcEvent=4
KAL-7: kal_ServiceNotify:
kalIndex = 49 kalSvcEvent=5
|
This message occurs when the CSS is configured with HTTP keepalives (HEAD or GET) and the servers are transitioning between states. The service event (kalSvcEvent) values are:
• 3 = Alive
• 4 = Dying
• 5 = Dead
Check the status of the server.
|
NETMAN-2: Generic:LINK DOWN for
13/1
CIRCUIT-6: Port 13/1 is down
for circuit VLAN1
NETMAN-2: Generic:LINK DOWN for
13/2
CIRCUIT-6: Port 13/2 is down
for circuit VLAN1
NETMAN-2: Generic:LINK DOWN for
13/3
CIRCUIT-6: Port 13/3 is down
for circuit VLAN1
NETMAN-2: Generic:LINK DOWN for
13/4
CIRCUIT-6: Port 13/4 is down
for circuit VLAN1
SYSSOFT-3: ONDM: Timeout
downloading image to EPIF 0
from the switch.
SYSSOFT-3: ONDM: Timeout
downloading image to EPIF 0
from the switch.
(11000 Series CSS Only)
|
EPIF 0 belongs to the first four ports on a FEM. This is usually a problem with the SFM not getting the code to the FEM or the FEM not reading the SFM properly.
In this case, there is a communications problem between the SFP 9/2 and the FEM.
JAN 5 00:31:43 arrowpoint1.com 9/2
385390 SYSSOFT-3: ONDM: Timeout
downloading image to EPIF 0 from the
switch.
JAN 5 00:31:45 arrowpoint1.com 9/2
385407 SYSSOFT-3: ONDM: Timeout
downloading image to EPIF 0 from the
switch.
The recommended course of action is to reseat the SFM in slot 9, and the FEM in slot 13 controlled by the SFM, and then power cycle the CSS.
|
NETMAN-2: Enterprise:Service
Transition:ServerA -> down
NETMAN-5: Enterprise:Service
Transition:ServerA -> alive
|
An information message when the service has transitioned state. Check the status of the server based on the keepalive parameters.
|
NETMAN-4:
SNMPAPI:SNMPAPI_Set:SET failure
|
A user on the CLI, either through the console or Telnet, entered a wrong command. A Telnet or console session displays this message stating that the command was incorrect.
|
NETMAN-5: Enterprise: Login
Failure:vty2 10.6.3.171 Mandy
|
The SNMP Enterprise login failure traps are enabled and a user entered an invalid username/password pair. For example, the user typed the wrong username and password three times.
|
NETMAN-5: Enterprise:Service >
Transition:nexthop00001 -> down
|
The next hop IP address is no longer reachable. When you configure a static route, a internal service is created such that when the service is up, the static route is included in the routing table. If the service goes down, it is removed from the routing table.
Make sure that all of the routes in the routing table are up. The routes may have transitioned states.
|
NETMAN-5: Generic:LINK UP for
3/1
SYSSOFT-7: NP55_connection.c
512: Connection already open or
reserved
SYSSOFT-3: NP55 Driver:
Connection already open or
reserved
SYSSOFT-2: VccAddVc:open conn
failed w/ stat = -1; iVc 320;
eVc 290
FLOWMGR-7: FM_GetIpv4Vc:
Warning VCC_FP_IPV4_DC failed
|
The flow manager tries to reallocate a VC that was already established.
These messages occur when the port is coming up. They do not represent a problem. The messages are also most noticeable at the end of boot time if you connected through the console.
|
NETMAN-5: Generic:SNMP
Authentication > Failure from
x.x.x.x
|
A user is trying to use SNMP to poll the CSS, but they have entered the wrong community string.
|
NETMAN-7:
clm_ProcessStdAction:ERROR->Act
ion<clms_dir>not found
NETMAN-7: CLM:ERROR from
clm_DispatchActionRoutine()
|
An invalid CLI command was entered. In this example, a user enter the dir command in debug mode, and gave an invalid directory. For example:
|
NETMAN-7: SNMP:UNKNOWN RSP
(493512
NETMAN-7: SNMP:(493512) Index =
1 <NO_SUCH_NAME>
|
A valid SNMP agent (community string matched) is trying to set an invalid object. The CSS does not know what it is.
|
NETMAN-7:
TSM:tsm_SendToCLA:ERROR->Write
|
This message is associated with line data moving through the stack after a line has been disconnected (Telnet application disconnect). It is at DEBUG level for developer information purposes only.
|
PORTMAPPER-5: PortUnmap no Port
mapping found.
PORTMAPPER-5: PortUnmap no Port
mapping found.
PORTMAPPER-5: PortUnmap no Port
mapping found.
|
These error messages refer to the source group running out of portmappers. Increase the portmappers on the source group so that the message does not appear, and users or services do not see a performance or NATing problem.
|
SYSSOFT-2: VccAddVc:open conn
failed w/ stat = -1; iVc 320;
eVc 290
|
This message occurs when a port goes up and down. Check the autonegotiation, which could be a mismatch, bad cable, or bad hardware.
|
SYSSOFT-3: ONDM: Could not open
file <wsscm.sys>
SYSSOFT-3: ONDM: Could not
download Sub-module 8/1.
SYSSOFT-3: ONDM: Could not open
file <wssfm.sys>
SYSSOFT-3: ONDM: Could not
download Sub-module 6/2.
SYSSOFT-3: ONDM: Could not
download Sub-module 6/1.
SYSSOFT-3: ONDM: Could not
download Sub-module 5/2
SYSSOFT-3: ONDM: Could not
download Sub-module 5/1.
SYSSOFT-3: ONDM:No Sfm proxy
for Slot 2.
SYSSOFT-3: ONDM:No Sfm proxy
for Slot 1.
|
The CSS could not find the image file to load on the disk. There is something wrong with the disk or the file was deleted from the directory.
Contact Cisco Systems customer support.
|
SYSSOFT-4: IMM Message Not
Deliverable:
|
The "SYSSOFT-4 IMM Message not Deliverable" message appears in the log when a certain queue on the CSS becomes full, overutilized, or needs to state a problem.
All messages of this type look very similar except for the values in the CE, message type, and message queue id field. The easiest way to decipher the message is to look at the CE value.
To determine which message queue is full, take bits 8 to 20 from the CE field and match them to the following message:
OCT 31 21:04:41 7/1 1324 SYSSOFT-4:
IMM message not deliverable, message
queue full, ce = 0x30202600, message
type = 0x370000, message queue id =
0x8229ec60
In the CE field for this example, the number is 26.
Then look at the following IMM messages for a similar message.
All the other information is CSS-specific. This field is constant throughout all versions of CSS software.
|
SYSSOFT-4: IMM message not
deliverable, message queue
full, ce = 0x20204500, message
type = 0x370000, message queue
id =0x855761a0
|
The ARP transmits queue, which holds 128 entries, is full. These are ARPs that the CSS is generating at bootup or when you assume mastership; it would be all the gratuitous ARPing for the VIPs. When you see this message, that gratuitous ARP packet is lost. The packet will not be resent and the upstream device is not notified about the MAC change in the case of redundancy.
In CSS software, you can configure VIP ranges. With ranges, you could suddenly have thousands of VIPs and these messages would be seen all the time. The CSS automatically rate-limits the number of ARPs that can be sent. The CSS also rate-limits the number of gratuitous ARP requests so that the ARP transmit queue does not overflow.
Note For information on deciphering this message, see the first SYSSOFT-4: IMM Message Not Deliverable: message, Cause and Resolution.
|
SYSSOFT-4: IMM message not
deliverable, message queue
full, ce = 0x21201502, message
type = 0x370000, message queue
id = 0x86911170
|
This IMM message queue error refers to the VLANMGR_SFM_TID task. This is the queue on the SFP that handles spanning tree events from the SCM. The queue holds 128 entries. Each time this message appears, a spanning-tree protocol (STP) age or state change event is being lost. Three types of packets come to this queue:
• SCM BPDUs - At most one per second for each port
• BRIDGE_DB_AGE_CHANGE_EVENTS - STP topology changes
• VLAN_STP_STATE_CHANGE_EVENTS - Ports are flipping from Blocking, Listening, or Forwarding
In a CSS running normally, these events are rare. We suggest you troubleshoot spanning tree.
Note For information on deciphering this message, see the first SYSSOFT-4: IMM Message Not Deliverable: message, Cause and Resolution.
|
SYSSOFT-4: IMM message not
deliverable, message queue
full, ce = 0x21202700, message
type = 0x370000, message queue
id= 0x867495c0
***********
This is the most seen IMM
message
*********************
|
A queue is getting overrun. This type of log entry occurs when the CSS is receiving a high volume of extraneous traffic. Because the CSS acts as both a router and a bridge, it must examine each packet. This particular queue handles all non-specific and non-IP traffic, including spanning tree BPDU, non-IP bridgeable traffic, ICMP, ARP, UDP fragments, and packets with expired TTL. This should not have any impact on user TCP traffic, because TCP is sent to a different queue.
Under load, especially due to a high number of UDP fragments or different Denial of Service (DoS) attacks, this queue would fill up and the CSS might drop some packets.
If this error appears in the log occasionally, check the show dos command to make sure the site is not under attack. Also, check the network topology to make sure the routing is solid. If the log is filling rapidly with these errors, then a packet capture may be helpful in isolating the cause.
Contact Cisco Systems customer support.
Note For information on deciphering this message, see the first SYSSOFT-4: IMM Message Not Deliverable: message, Cause and Resolution.
|
SYSSOFT-4: IMM message not
deliverable, message queue
full, ce = 0x21203500, message
type = 0xc0, message queue id =
0x879c8150
SYSSOFT-4: IMM message not
deliverable, message queue
full, ce = 0x21203500, message
type = 0xc0, message queue id =
MAR 20 06:25:56 7/1 9
REDUNDANCY-4: Transition to
redundancy backup, master is
0.0.0.0
|
The ASYNC message task processing cannot deliver a message because the queue is full. At bootup time, you can ignore it.
If these are streaming into the log during normal operations, it would warrant more investigation.
Contact Cisco Systems customer support.
Note For information on deciphering this message, see the first SYSSOFT-4: IMM Message Not Deliverable: message, Cause and Resolution.
|
SYSSOFT-4: IMM message not
deliverable, message queue
full, ce = 0x21203800, message
type = 0x38000e, message queue
id = 0x87a1af60
|
The SFM_FW_MAP_PORT_MSG cannot be delivered because the message queue is full. The message is sent when an FTP/RealAudio Control PORT, 227 Entering Passive, O (backspace) command is received and causes the CSS to allocate a portmapper port to be used for the data channel that is about to open.
The port uses this notification message (SFM_FW_MAP_PORT_MSG) to inform all other SFMs to allocate the same portmapper resource. The portmapper resource can then be found and used when the data channel SYN comes in any SFM.
The possible cause of this error could be a large amount of FTP/RealAudio coming into the CSS. Increase the number of portmaps in the source group.
Note For information on deciphering this message, see the first SYSSOFT-4: IMM Message Not Deliverable: message, Cause and Resolution.
|
SYSSOFT-4: IMM message not
deliverable, message queue
full, ce = 0x21203800, message
type = 0x38000f, message queue
id = 0x87a1af60
|
The SFM_FW_UNMAP_PORT_MSG cannot be delivered because the message queue is full. This message is similar to the previous IMM message except in this case, the CSS is trying to inform all other SFMS to unmap the same portmapper resource. The possible cause of this error could be a large amount of FTP/RealAudio coming into the CSS.
Contact Cisco Systems customer support.
Note For information on deciphering this message, see the first SYSSOFT-4: IMM Message Not Deliverable: message, Cause and Resolution.
|
SYSSOFT-4: IMM message not
deliverable, message queue
full, ce = 0x30202500, message
type = 0x370000, message queue
id = 0x8229ec60
|
This is the IPV4 Receive message queue on the SCM. The only traffic that reaches this queue is destined for one of the circuit addresses. This traffic includes keepalives, Telnet, SSH, FTP, CAPP, SNMP, XML and so forth.
This message indicates a large number of services with individual keepalives. At times, they can overwhelm this queue. A reconfiguration using global keepalives is needed.
It is possible that someone is attacking the site. This message is of concern and should be investigated. Contact Cisco Systems customer support.
Note For information on deciphering this message, see the first SYSSOFT-4: IMM Message Not Deliverable: message, Cause and Resolution.
|
SYSSOFT-4: IMM message not
deliverable, message queue
full, ce = 0x30202600, message
type = 0x370000, message queue
id = 0x8229ec60
|
This IMM message queue error refers to the IPV4_ARP_TID. This is a 256-entry queue on the SCM that handles route changes, and MAC address events (moved, down, up).
They are also due to a large number of VIPs. Missing a few messages from this queue is not fatal. Contact Cisco Systems customer support.
Note For information on deciphering this message, see the first SYSSOFT-4: IMM Message Not Deliverable: message, Cause and Resolution.
|
SYSSOFT-4: IMM message not
deliverable, message queue
full, ce = 0x30203900, message
type = 0x390003, message queue
id = 0x863eb5b0
(11000 Series CSS Only)
|
The task ID 0x39 from the CE field is CSD_SCM_TID. The message type of 0x390003 is a SCM_CNT_CREATE. Each time the SFM sees a new request for content, it sends a message to the SCM. This is for hotlist statistics and the show content command. The SFMs overwhelm the SCM with these messages causing the queues to fill up and then this message occurs.
Lower the logging level for syssoft to critical. Contact Cisco Systems customer support.
Note For information on deciphering this message, see the first SYSSOFT-4: IMM Message Not Deliverable: message, Cause and Resolution.
|
SYSSOFT-4: IMM message not
deliverable, message queue
full, ce = 0x30202c05, message
type = 0x370000, message queue
id =0x823ade90
(11000 Series CSS Only)
|
The task ID 0x2c or 44 is the VLANMGR_SCM_TID. This message queue is on the SCM and receives the control STP BPDUs from the SFPs. The control message occurs when the port changes state appearing as if the port is being overrun with STP BPDUs. This might occur on a CSS 11800 in the core of a network. Because the queue is full, you would lose some BPDUs, which is probably not critical.
This message may occur during a link up/down when the bridging status changed. Contact Cisco Systems customer support.
Note For information on deciphering this message, see the first SYSSOFT-4: IMM Message Not Deliverable: message, Cause and Resolution.
|
Verifying Files(-) Warning,
Errors were corrected
Recovered 1 lost clusters
|
There is a bad block on the disk. Either reformat or replace the disk. Disk replacement is recommended.
|
VPM rejected flow - Flow exceed
max Flows on the VC pipe <addr>
|
An informational message, which does not require any further action.
|
WCC-7: Route Change for IP
Address ( x.x.x.x)
|
An informational message that an ARP came in on a different port.
|
Where to Go Next
Chapter 6, Configuring User Profiles and CSS Parameters, provides information on how to configure user profiles and CSS parameters. This chapter also contains information on using the Content API and Command Scheduler features.