CSS Administration Guide (Software Version 7.10)
Using the CSS Logging Features

Table Of Contents

Using the CSS Logging Features

Logging Overview

Logging Quick Start Table

Specifying Logging Buffer Size

Specifying Log File Destination

Specifying a Log File on the Disk

Disabling Logging to the sys.log File on Disk

Specifying Host for a Log File Destination

Specifying a Line for a Log File Destination

Enabling Logging on a Subsystem

Disabling Logging for a Subsystem

Configuring a Log Message for a Subsystem at a Logging Level

Logging ACL Activity

Sending Log Messages to an Email Address

Logging CLI Commands

Showing Log Files

Showing Log Activity

Showing Log Lists

Showing Log State

Copying Log Files to an FTP or TFTP Server

Copying Log Files to an FTP Server

Copying Log Files to a TFTP Server

Interpreting sys.log Log Messages

Frequently Queried Log Messages

Where to Go Next


Using the CSS Logging Features


This chapter describes how to enable logging, set up the log buffer, determine where to send the activity information, and display and interpret log messages. Information in this chapter applies to all CSS models, except where noted.

This chapter contains the following sections:

Logging Overview

Specifying Logging Buffer Size

Specifying Log File Destination

Enabling Logging on a Subsystem

Logging CLI Commands

Showing Log Files

Copying Log Files to an FTP or TFTP Server

Interpreting sys.log Log Messages

Frequently Queried Log Messages

Logging Overview

The CSS generates log messages to assist you in debugging and monitoring it. By default, the CSS saves boot and subsystem event log messages to log files on its hard or flash disk. The content of these files is recorded in ASCII text. You can also configure the CSS to send log messages to an active CSS session, e-mail address, or another host system.


Note The maximum size of a log file is 50 MB for hard disk-based systems, and 10 MB for flash disk-based systems.


The boot log messages are the result of the boot process. The CSS saves these messages in the boot.log file.

The subsystem log messages are subsystem events that occur during the operation of the CSS. The CSS saves these messages in the sys.log file. The CSS creates this file when the first loggable subsystem event occurs. The CSS determines which subsystem messages to log by its configured logging level. By default, the CSS logs events on all subsystems with a level of warning. The warning level designates that the CSS logs fatal, alert, critical, error, and warning messages for the subsystem.

You have the option to log subsystem messages at a different level than the default warning level. The level you specify instructs the CSS to log subsystem activity that occurs at that level and the activity greater than that level.

In addition to informational messages, the CSS also logs notice, warning, error, critical, alert, and fatal messages.


Note You can display or copy a log file using the show log or copy log command, respectively. For details on the show log command, see "Showing Log Files" later in this chapter. For details on the copy log command, see "Copying Log Files to an FTP or TFTP Server" later in this chapter. You need SuperUser privileges to use the show log command.


The CSS provides logging capabilities for debugging and system monitoring by generating the log files described in Table 5-1.

Table 5-1 CSS Log File Descriptions 

Log File
Log File Destination
Records
Default Location
Alternate Location

Boot.log

Hard disk and console or flash disk and console

None

Results of the boot process.

Boot.bak

Hard disk and console or flash disk and console

None

Backup of a boot log file. Each time you reboot the CSS, the software renames the current boot log file to boot.log.prev and starts a new boot log file. The CSS overwrites an existing backup boot log file when a boot log file is renamed.

Sys.log

Hard disk or flash disk

Console
syslogd
VTY1
VTY2

Log information for user-defined subsystem or CLI commands. By default, logging is enabled and logs subsystem all with level warning. The CSS creates sys.log to record this log information.

Sys.log.prev

Hard disk or flash disk

Console
syslogd
VTY1
VTY2

Backup of a system log file. When a system log file reaches its maximum size (50 MB, for a hard disk-based CSS; 10 MB, for a flash disk-based CSS), the software renames the system log file to sys.log.prev and starts a new system log file. The CSS overwrites an existing backup system log file when a system log file is renamed. When you reboot a CSS, the software continues to use the existing system log file until it reaches its maximum size.


Logging Quick Start Table

If you are familiar with the CSS logging functions, see Table 5-2 for the commands and command options required to configure and enable logging. For detailed information on the CSS logging functions, see the sections following Table 5-2.


Note Configure all logging commands from config mode except for the clear log command. The clear log command is available in SuperUser mode at the root prompt (#).


Table 5-2 Configuring and Enabling Logging 

Step
Logging Option
Example

1. Specify the disk buffer size.

size - Size of the disk buffer
(0 to 64000)

logging buffer 1000

2. Specify the destination (disk, host, line) where you wish to log subsystem activity.

disk filename - New or existing filename in the log directory

host ip or host - IP address of the syslog daemon on the host or a host name

log line - CSS active session

logging disk stubs

logging host 192.168.11.3

logging host myhost.domain.com

logging line vty1

3. Select a CSS subsystem and determine which type of activity to log (default all) and level (default warning).

subsystem - Valid subsystems:

acl, all, app, boomerang, buffer, cdp, chassis, circuit, csdpeer, dhcp, dql, fac, flowagent, flowmgr, fp-driver, hfg, ipv4, keepalive, netman, netmgr, nql, ospf, pcm, portmapper, proximity, publish, radius, redundancy, replicate, rip, security, ssl-accel, slr, sntp, syssoft, urql, vlanmgr, vpm, vrrp, wcc

level - Valid levels:

fatal-0, alert-1, critical-2, error-3, warning-4, notice-5, info-6, debug-7

logging subsystem rip level alert-1

4. Optionally, enable the CSS to send log messages to an email address and specify a level.

sendmail email address of mail recipient

IP address or hostname of SMTP host

level - Valid levels:

fatal-0, alert-1, critical-2, error-3, warning-4, notice-5, info-6, debug-7

logging sendmail us@arrowpoint.com 172.3.6.58 critical

5. Show the log file.

filename - Log file to display

show log stubs


Specifying Logging Buffer Size

The logging buffer size is the amount of information the CSS buffers in memory before outputting the information to disk. The larger you configure the buffer size, the less frequently the CSS outputs the contents to disk. Specifying a buffer size is required only if you configure logging to disk.

To set the disk buffering size, use the logging buffer command. Specify the buffer size from 0 to 64,000 bytes. The default is 0, where the CSS sends the logging output directly to the log file.

To set the buffer size to 1000 bytes, enter:

(config)# logging buffer 1000

To send the logging output directly to the log file, enter:

(config)# no logging buffer

Specifying Log File Destination

To specify a destination where the CSS logs subsystem activity, use the logging command. You can specify the following locations for log files:

disk filename - New or existing filename in the disk log directory

host ip or host - IP address of the syslog daemon on the host or a host name

log line - CSS active session

For information on logging to these destinations, see the following sections.


Note If logging requires frequent writes to disk (that is, several hundred log messages per day), the most reliable configuration is to log to a hard disk and store all other system files on a flash disk. Although flash disks generally provide the most reliable way to store information over time, hard disks endure frequent writes to disk better than the flash disks currently available.

To prevent excessive writes to the CSS disk, consider disabling logging to the sys.log file on disk (see "Disabling Logging to the sys.log File on Disk"). If desired, you can continue sending CSS log information to the sys.log file at an alternate location. To do this, use either the logging host command to send log information to a syslog daemon on a host system (see "Specifying Host for a Log File Destination") or the logging line command to send (but not save) log information to an active CSS line (see "Specifying a Line for a Log File Destination").



Caution Logging to a CSS disk causes the performance of the CSS to degrade.

Specifying a Log File on the Disk

To send log information to specific file on the CSS disk, use the logging disk command and specify a log filename. The filename can be new or existing. Enter a text string from 0 to 32 characters.

For example:

(config)# logging disk stubs

When you enter this command, the CSS:

Stops writing default log information to the sys.log file

Creates the filename you specify in the disk log directory

Sends subsystem and level information to the log filename

You can have only one active log file on the disk at a time. If you wish to send subsystem information to a different log file on the disk, reenter the logging disk command with a different filename.


Caution Logging to a CSS disk causes the performance of the CSS to degrade.

To stop logging to the specified file and reenable logging to the sys.log file on the CSS, enter:

(config)# no logging disk

Disabling Logging to the sys.log File on Disk

To disable logging to the sys.log file on the CSS disk (hard or flash), use the logging to-disk command. Disabling logging to the sys.log file is useful when you want to prevent excessive writes to the CSS disk (for example, to the flash disk) or to increase the performance of the CSS.


Note You can continue sending CSS log information to the sys.log file at an alternate location. To do this, use either the logging host command to send log information to a syslog daemon on a host system (see "Specifying Host for a Log File Destination") or the logging line command to send (but not save) log information to an active CSS line (see "Specifying a Line for a Log File Destination").


The options for the logging to-disk command are:

logging to-disk disable - Disables writing default log information to the CSS sys.log file on the CSS disk.


Note The logging to-disk disable command affects the sys.log file only, and does not affect a disk log file that was specified through the logging disk command. You can still use the logging disk filename command to send log information to a specific filename on the CSS disk. To disable all logging to the CSS disk, first enter the no logging disk command and then enter the logging to-disk disable command. Be aware that if you enter the no logging disk command the CSS does not reenable logging to the sys.log file. You must enter the logging to-disk enable command to reactivate the sys.log file.


logging to-disk enable - Resets logging back to disk and resumes writing default log information to the CSS sys.log file.


Note You are prompted to reboot the CSS after issuing the logging to-disk disable or logging to-disk enable commands for the command to take effect.


To disable logging to the CSS sys.log file on the CSS disk (flash disk or hard disk), enter:

(config)# logging to-disk disable

To resume logging back to the CSS disk, enter:

(config)# logging to-disk enable

Specifying Host for a Log File Destination

To send log information to a syslog daemon on the host system, use the logging host command and specify:

An IP address or a host name - The address of the syslog daemon on the host. Enter the IP address in dotted-decimal notation (for example, 192.168.11.1) or the mnemonic host name (for example, myhost.mydomain.com).

facility number - The syslog daemon facility level. Facilities are considered to be service areas, such as printing, e-mail, or network. Enter a number from 0 to 7. For more information on the syslog daemon and facility levels, refer to your syslog daemon documentation.

log-level number - Specifies the level of the CSS subsystem log messages to be sent to the syslog daemon on the host. Enter a subsystem log-level from 0 to 7, which correspond to the following logging levels:

0 (fatal-0), 1 (alert-1), 2 (critical-2), 3 (error-3), 4 (warning-4), 5 (notice-5), 6 (info-6), and 7 (debug-7) (default).

The logging host log-level number must be equal to or less than the log level you configure for the logging subsystem command (see the "Enabling Logging on a Subsystem" section). If the log-level is less than the logging subsystem level, the CSS only sends the message level specified in the log-level option. If the log-level is greater than the logging subsystem level, the CSS only sends the level of messages specified in the logging subsystem command.

The CSS continues to send log information to the sys.log file on the CSS disk (hard or flash) when the logging host command is entered. To disable logging to the sys.log file on the CSS disk, use the logging to-disk disable command.

For example:

(config)# logging host 192.168.11.1 facility 3 log-level 3

To turn off logging to a host, enter:

(config)# no logging host

Specifying a Line for a Log File Destination

To send log information to an active CSS session, use the logging line command and specify a valid log line on the CSS. Enter the line as a case-sensitive text string with a maximum of 32 characters.


Note The CSS continues to send log information to the sys.log file on the CSS disk (hard or flash) even when the logging line command is entered. To disable logging to the sys.log file on the CSS disk, use the logging to-disk disable command.


To display a list of active CSS lines, enter the logging line command as shown. The * denotes your current session.

(config)# logging line ?

console     Login Name:  Location:local
*vty1       Login Name:  admin Location:10.0.3.35

To send subsystem information to your monitor, enter:

(config)# logging line vty1

To turn off logging, enter the no logging line command.

(config)# no logging line vty1

Enabling Logging on a Subsystem

Use the logging subsystem command to select a CSS subsystem and determine which type of activity to log. The level you specify instructs the CSS to log subsystem activity that occurs at that level and the activity greater than that level. For example, if you wish to log info messages, the CSS also logs error, critical, alert, and fatal error levels.

The following example enables logging for the chassis subsystem with a critical-2 error level. The CSS logs all critical, alert, and fatal errors for the chassis.

(config)# logging subsystem chassis level critical-2

Table 5-3 defines the CSS subsystems for which you can enable logging.

Table 5-3 Logging Subsystems 

Subsystem
Definition

acl

Access Control List (ACL)

all (default)

All CSS subsystems

app

Application Peering Protocol (APP)

boomerang

DNS Content Routing Agent (CRA)

buffer

Buffer manager

cdp

Cisco Discovery Protocol (CDP)

chassis

Chassis manager

circuit

Circuit manager

csdpeer

Content Server Database (CSD) peer

dhcp

Dynamic Host Configuration Protocol (DHCP)

dql

Domain Qualifier List (DQL)

fac

Flow Admission Control (FAC)

flowagent

Flow Agent

flowmgr

Flow manager subsystem

fp-driver

Fathpath Driver

hfg

Header Field Group (HFG)

ipv4

Internet Protocol version 4 (IPv4)

keepalive

Keepalive

natmgr

NAT Manager

netman

Network management

nql

Network Qualifier List (NQL)

ospf

Open Shortest Path First (OSPF)

pcm

Proximity CAPP Messaging (PCM)

portmapper

Port Mapper

proximity

Proximity

publish

Publish

radius

Remote Authentication Dial-In User Server (RADIUS)

redundancy

CSS redundancy

replicate

Content replication

rip

RIP

security

Security manager

ssl-accel

Secure Socket Layer (SSL) Acceleration

slr

Session Level Redundancy

sntp

Simple Network Time Protocol (SNTP)

syssoft

System software

urql

Uniform Resource Locator Qualifier List (URQL)

vlanmgr

VLAN manager

vpm

Virtual pipe manager

vrrp

Virtual Router Redundancy Protocol

wcc

Web conversation control


Table 5-4 defines the logging levels you can set for a CSS subsystem. The logging levels are listed in order of severity with a fatal error being the most severe and info being the least severe error.

Table 5-4 Subsystem Logging Levels 

Level
Definition

fatal-0

Fatal errors only.

alert-1

Alert errors, including fatal errors.

critical-2

Critical errors, including alert and fatal errors. The following trap events log at the critical level: link down, cold start, warm start, service down, service suspended.

error-3

General errors, including critical, alert, and fatal errors.

warning-4
(default)

Warning messages, including all lower levels (error, critical, alert, and fatal.

notice-5

Notice messages, including all trap events (except for events logged at critical) and all lower levels except for info and debug.

info-6

Informational messages, including all lower levels except for debug.

debug-7

Debug messages, including all other error levels. The debug-7 log level may degrade the performance of the CSS. When you enter this option, the CSS prompts you with the following message:

Logging at the debug level may degrade the CSS 
performance. Continue, [y/n]: 

Enter y to verify that you want to set the log level to debug-7.
Enter n to cancel the executing of the debug-7 log level.


Disabling Logging for a Subsystem

To reset logging for a subsystem to the default logging level (warning-4), enter the no version of the logging command. For example:

(config)# no logging subsystem redundancy

Configuring a Log Message for a Subsystem at a Logging Level

Use the cliLogMessage subsystem command to define a log message for a subsystem at a particular logging level. The syntax for this global configuration mode command is:

cliLogMessage subsystem name "message" level level

The variables are:

name - The name of a CSS subsystem. Enter one of the following subsystem names:

acl - Access Control Lists

all - all subsystems

app - Application Peering Protocol (APP)

boomerang - DNS Content Routing Agent

buffer - Buffer Manager

cpd - Cisco Discovery Protocol (CDP)

chassis - Chassis Manager

circuit - Circuit Manager

csdpeer - Content Server Database (CSD) Peer

dhcp - Dynamic Host Configuration Protocol (DHCP)

dql - Domain Qualifier List (DQL)

fac - Flow Admission Control (FAC)

flowagent - Flow Agent

flowmgr - Flow Manager

fp-driver - Fathpath Driver

hfg - Header Field Group (HFG)

ipv4 - Internet Protocol version 4

keepalive - Keepalive

natmgr - NAT Manager

netman - Network Management

nql - Network Qualifier List (NQL)

ospf - Open Shortest Path First (OSPF)

pcm - Proximity CAPP Messaging (PCM)

portmapper - PortMapper

proximity - Proximity

publish - Publish

radius - Remote Authentication Dial-In User Server (RADIUS)

replicate - Replication

redundancy - CSS redundancy

rip - RIP

security - Security Manager

slr - Session Level Redundancy

sntp - Simple Network Time Protocol (SNTP)

ssl-accel - Secure Socket Layer (SSL) Acceleration

syssoft - System software

urql - Uniform Resource Qualifier List

vlanmgr - VLAN Manager

vpm - Virtual Pipe Manager

vrrp - Virtual Router Redundancy Protocol

wcc - Web Conversation Control

To see a list of subsystems, enter:

cliLogMessage subsystem ?

level - The log level for the message. Enter one of these levels:

fatal-0 - Fatal errors only

alert-1 - Alert errors, including errors at the fatal-0 level

critical-2 - Critical errors, including errors at the alert-1 level

error-3 - Error errors, including errors at the critical-2 level

warning-4 - Warning errors (default), including errors at the error-3 level

notice-5 - Notice messages, including errors at the warning-4 level

info-6 - Informational messages, including errors at the notice-5 level

debug-7 - All errors and messages

Logging ACL Activity

When you configure the CSS to log ACL activity, it logs the event of the packet matching the clause and ACL. The CSS sends log information to the location you specified in the logging command.


Note Before you configure logging for a specific ACL clause, ensure that global ACL logging is enabled. To globally enable ACL logging, use the logging subsystem acl level debug-7 command in config mode.


To configure logging for an ACL clause:

1. Enter the ACL mode for which you want to enable logging.

(config)# acl 7
(config-acl[7])#

2. Enable logging for:

A new clause by entering the log option at the end of the clause. For example:

	(config-acl[7])# clause 1 deny udp any eq 3 destination any 
eq 3 log

An existing clause by using the clause log enable command:

	(config-acl[7])# clause 1 log enable

To disable ACL logging for a specific clause, enter:

(config-acl[7])#) clause 1 log disable

To globally disable logging for all ACL clauses, enter:

(config)# no logging subsystem acl

Sending Log Messages to an Email Address

To send the log activity of a subsystem to an email address, use the logging sendmail command. The syntax for this global configuration mode command is:

logging sendmail email_address ip_address level

The variables are:

email_address - The email address for the recipient. Enter the email address as an unquoted text string with a length of 1 to 30 characters.

IP_address - The IP address for the SMTP host. Enter the IP address in dotted-decimal notation (for example, 192.168.11.1).

level - The type of information to log. The valid levels are defined in Table 5-4.

domain - The domain name for the SMTP host. Enter an unquoted text string with a maximum length of 64 characters (for example, arrowpoint.com). Do not insert an @ sign before the domain name. The CSS automatically prepends it to the domain name.

To turn off logging to an email address, enter:

(config)# no logging sendmail email_address

Logging CLI Commands

When you want to keep track of all CLI commands entered from the CSS, you can log them to the sys.log file. To log the CLI commands:

1. Set the logging level of the netman subsystem to info-6. Enter:

(config)# logging subsystem netman info-6

2. Enable logging of commands through the logging commands enable command. This command logs each CLI command to the sys.log file. Enter:

(config)# logging commands enable

To disable logging CLI commands to the sys.log file, enter:

(config)# no logging commands

Showing Log Files

Use the show log command to display the contents in a log or trap log file. You need SuperUser privileges to use the show log command.

The options for this command are:

show log - Send the log activity to your current session, or display the contents in a log or a trap log file.

show log-list - Display a list of all log files.

show log-state - Display the state of logging for CSS facilities.


Note When you use the show log command to send the log activity to your current session, and you want to stop sending log activity, press any key on the terminal or workstation. The show log command performs the same function as (config) logging line. Note that you cannot run these commands at the same time.


Showing Log Activity

Use the show log command and its options to send the log activity to your current session, or to display the contents in a log or trap log file. You need SuperUser privileges to use the show log command. The syntax for the show log command is:

show log {log_filename {tail lines} {line-numbers}}

The options and variables for the show log command include:

log_filename - The name of the log file. Enter an unquoted text string with no spaces. To see a list of log files with their dates, enter:

show log ? 

tail lines - Display the bottom and most recent portion of the log file. The CSS displays the log file starting from the beginning of the file, with the top of the file listing the older messages and the bottom listing the most recent messages. You can specify the number of lines to display (to a maximum of 1000 lines), starting at the end of the log file. Enter a number from 1 to 1000.

line-numbers - Include the line numbers when displaying the contents of the log file.

traplog - Display all SNMP traps that have occurred. A trap log file is an ASCII file in the log directory containing generic and enterprise traps. By default, the following events generate level critical-2 messages:

Link Up

Link Down

Cold Start

Warm Start

Service Down

Service Suspended

All other SNMP traps generate level notice-5 messages.


Note When traps are disabled, the CSS still produces a log message for any event that would normally generate a trap.


To send the log activity to your current session, enter:

# show log 
Displaying Log events. 
Press any key to abort...
APR 14 16:28:09 5/1 2398 NETMAN-7: HTTPC:HTTPC_Open: 
ERROR->connect <-1,0> <192.20.1.7> <80> 
APR 14 16:28:15 5/1 2399 NETMAN-7: HTTPC:HTTPC_Open: 
ERROR->connect <-1,0> <192.20.1.7> <80> 
APR 14 16:28:21 5/1 2400 NETMAN-7: HTTPC:HTTPC_Open: 
ERROR->connect <-1,0> <192.20.1.7> <80> 
APR 14 16:28:27 5/1 2401 NETMAN-7: HTTPC:HTTPC_Open: 
ERROR->connect <-1,0> <192.20.1.7> <80> 

To display information in a specific log file, enter the show log command with a valid log filename. For example:

# show log stubs 
SEP 22 09:59:18 5/1 918 NETMAN-7: SNMP:SET RSP (3803) 
SEP 22 09:59:53 5/1 919 NETMAN-7: SNMP:SET  (3804) 
SEP 22 09:59:53 5/1 920 NETMAN-7: SNMP:  1 
apLogHostIpAddress.[1.2.3.4] VT_IPADDRESS  <1.2.3.4> 
SEP 22 09:59:53 5/1 921 NETMAN-7: SNMP:  2 
apLogHostIpAddress.[1.2.3.4] VT_IPADDRESS  <1.2.3.4> 

To view the content of the sys.log file, enter:

(config)# show log sys.log

To view the bottom and most recent portion of the file, use the tail option with the show log command. To view the most recent 500 lines in the sys.log file, enter:

(config)# show log sys.log tail 500

Showing Log Lists

Use the show log-list command to display a list of all log files. For example:

(config)# show log-list 

Showing Log State

Use the show log-state command to display the state of logging for CSS facilities. For example:

(config)# show log-state 

Table 5-5 describes the fields in the show log-state output.

Table 5-5 Field Descriptions for the show log-state Command 

Field
Description

Subsystems:

acl

Access Control List (ACL)

app

Application Peering Protocol (APP)

boomerang

DNS Content Routing Agent (CRA)

buffer

Buffer manager

cdp

Cisco Discovery Protocol (CDP)

chassis

Chassis manager

circuit

Circuit manager

csdpeer

Content Server Database (CSD) peer

dhcp

Dynamic Host Configuration Protocol (DHCP)

dql

Domain Qualifier List (DQL)

fac

Flow Admission Control (FAC)

flowagent

Flow Agent

flowmgr

Flow manager subsystem

fp-driver

Fathpath Driver

hfg

Header Field Group (HFG)

ipv4

Internet Protocol version 4 (IPv4)

keepalive

Keepalive

natmgr

NAT Manager

netman

Network management

nql

Network Qualifier List (NQL)

ospf

Open Shortest Path First (OSPF)

pcm

Proximity CAPP Messaging (PCM)

portmapper

Port Mapper

proximity

Proximity

publish

Publish

radius

Remote Authentication Dial-In User Server (RADIUS)

redundancy

CSS redundancy

replicate

Content replication

rip

RIP

security

Security manager

ssl-accel

Secure Socket Layer (SSL) Acceleration

slr

Session Level Redundancy

sntp

Simple Network Time Protocol (SNTP)

syssoft

System software

urql

Uniform Resource Locator Qualifier List (URQL)

vlanmgr

VLAN manager

vpm

Virtual pipe manager

vrrp

Virtual Router Redundancy Protocol

wcc

Web conversation control

acl

Access Control List (ACL)

all (default)

All CSS subsystems

app

Application Peering Protocol (APP)

Levels:

debug

Log all errors and messages (Verbose)

info

Log informational messages, including errors at the notice level

notice

Log notice messages, including errors at the warning level

warning

Log warning errors (default), including errors at the error level

error

Log error errors, including errors at the critical level

critical

Log critical errors, including errors at the alert level

alert

Log alert errors, including errors at the fatal level

fatal

Log fatal errors only (Quiet)

Lines

Lists the connected sessions (CSS 11800 only)

File:

Filename:

The name of the log file

Current size:

The current size of the log file

Log to Disk

Identifies if logging to disk (flash disk or hard disk) is enabled or disabled.


Copying Log Files to an FTP or TFTP Server

To copy log files from the CSS to a File Transfer Protocol (FTP) or Trivial File Transfer Protocol (TFTP) server, use the copy log command. The copy log command is available at the SuperUser prompt.

The options for this command are:

copy log log_filename ftp

copy log log_filename tftp

To see a list of log files, enter the copy log ? command.

Copying Log Files to an FTP Server

To copy a log file to an FTP server, use the copy log ftp command. Before you copy a log file from the CSS to an FTP server, you must create an FTP record file containing the FTP server IP address, username, and password. For information on configuring an FTP record, refer to Chapter 1, Logging In and Getting Started.

The syntax is:

copy log logfilename ftp ftp_record filename

For example:

# copy log starlog ftp ftpserv1 starlogthurs

The variables are:

logfilename - The name of the log file on the CSS. Enter an unquoted text string with no spaces and a maximum of 32 characters.

ftp_record - The name of the FTP record file that contains the FTP server IP address, username, and password. Enter an unquoted text string with no spaces and a maximum of 16 characters..

filename - The name you want to assign to the file on the FTP server. Include the full path to the file. Enter an unquoted text string with no spaces and a maximum of 32 characters.

Copying Log Files to a TFTP Server

To copy a log file to an TFTP server, use the copy log tftp command.

The syntax is:

copy log logfilename tftp IP address or hostname filename

The variables are:

logfilename - The name of the log file on the CSS. Enter an unquoted text string with no spaces and a maximum of 32 characters.

IP address or hostname - The IP address or host name of the TFTP server to receive the file. Enter an IP address in dotted-decimal notation (for example, 192.168.11.1) or in mnemonic host-name format (for example, myhost.mydomain.com). If you wish to use a hostname, you must first set up a host table using the (config) host command.

filename - The name you want to assign to the file on the TFTP server. Include the full path to the file. Enter an unquoted text string with no spaces and a maximum of 32 characters.

Interpreting sys.log Log Messages

The following is an example of a sys.log message. This section uses this example to describe the parts of a log message.

FEB 16 14:01:13 5/1 2453 VLANMGR-7: Transmit sfm STP BPDU on bPort 1, 
egressLp 0x1f00 VlanLpSend() ret:0

A log message consists of the following components:

The time stamp indicates when the log message event occurred. In this example, the time stamp is FEB 16 14:01:13.

The physical interface indicates where the event occurred in the CSS. For a CSS 11501, CSS 11050, or CSS 11150, it indicates the interface port format (for example, e2). For a CSS 11503, CSS 11506, or CSS 11800, it indicates the slot/port (for example, 3/1).

The counter records the incremental occurrence of each message. The count of this message is 2,453.

The subsystem name and level is the CSS subsystem assigned to the message and the level of the message. Because this example is a subsystem message, the subsystem is the VLAN Manager and the log level is 7, which is a debug level (VLANMGR-7). See "Enabling Logging on a Subsystem" earlier in this chapter for a list of CSS subsystems.

The log message indicating the event the occurred. The remaining string in the example is the event that occurred.

Transmit sfm STP BPDU on bPort 1, egressLp 0x1f00 VlanLpSend() 
ret:0


Note You can define a log message for a subsystem at a particular logging level through the cliLogMessage subsystem command. For more information, see "Configuring a Log Message for a Subsystem at a Logging Level" earlier in this chapter.


Frequently Queried Log Messages

Table 5-6 lists CSS log messages that users frequently query. This table includes information on the possible cause and corrective action, if required. The table lists messages alphabetically. The listed subsystem log messages are listed starting from the subsystem field.

Table 5-6 Log Messages 

Log Message (sys.log: Subsystem Name, Level, and Message)
Cause and Resolution
BootRom...booting ... Locked 
boot flash. 
Validating operational boot 
flash, please wait... 
Operational boot flash valid. 
Jumping to operational boot 
flash. 
... Operational boot flash. 
Version <number> Build <#> PN: 
Rev: . SN: Master SCM Running 
POST Diagnostics
<2><3><4><6><7><8><... POST
Diagnostics PASSED Booting into 
Offdm image at 0xbfd80000 
SCM:MASTER
Other:PRESENT 
Reading configuration 
records...OK Checking previous 
shutdown..OK Initializing the 
disk...
Pi Diagnose()
ERROR: ATA device reports error 
status register = 127error 
register = 127 piDiagnose()
ERROR: semaphore take failure 
semStatus = -1 status register 
= 127 error register = 127 
WARNING: IDE Disk 0 PIO Mode 
initialization piDrv() failed!
WARNING: PiFsInit() could not 
create Block device for IDE 
disk! FAILED 

The disk device driver timed out waiting for a response from the disk drive during its initialization. The message typically means that the disk is absent from the SCM, but could mean that the disk itself is unresponsive.

Make sure that the disk is located in slot 0. If it is, try removing and reinstalling it, then reboot the CSS.

CHMGR: Missing backup power 
supply. 

(11500 Series CSS Only)

The power supply lost AC power from the source. A CSS 11501 and CSS 11503 contains one power supply. The CSS 11506 contains up to three power supplies, but requires two functioning power supplies to guarantee service. If the following message appears before these messages, then you can assume that the problem is with the AC power source, not the power supply.

CHMGR: Cannot locate power supply: 
PSnumber. 

The PSnumber variable indicates which power supply cannot be found or has failed.

To determine whether the CSS 11500 series power supplies are working properly, both LEDs on the front of each power supply should be lit.

CHMGR: Cannot locate power 
supply: PSnumber. 

(11500 Series CSS Only)

The CSS chassis is not able to find the power supply. A CSS 11501 and CSS 11503 contains one power supply. The CSS 11506 contains up to three power supplies but requires two functioning power supplies to guarantee service. The PSnumber variable indicates which power supply cannot be found or has failed. If you know that the power source is supplied to the chassis and correctly flowing to it, then the problem may be the power supply.

To determine whether the CSS 11500 series power supplies are working properly, both LEDs on the front of each power supply should be lit.

CHM-1: CHMGR: Missing backup 
power supply. 

(11000 Series CSS Only)

The power supply lost AC power from the source. If the following message appears before these messages, then you can assume that the problem is with the AC power source, not the power supply.

CHM-1: CHMGR: Cannot locate power 
supply: PS2. 

To determine whether both power supplies are working properly, both green LEDs should be lit on the front of the active SCM in the CSS 11506.

CHM-1: CHMGR: Cannot locate 
power supply: PS2. 
CHM-1: CHMGR: Cannot locate 
power supply: PS1. 

(11000 Series CSS Only)

The CSS chassis is not able to find the power supply. If you know that the power source is supplied to the chassis and correctly flowing to it, then the problem may be the power supply.

To determine whether both power supplies are working properly, both green LEDs should be lit on the front of the active SCM in the CSS 11506.

CIRCUIT-7: Circuit status 
message for circuit 1023 sent 
to CE 20202c01 cause code is 7 

Cause codes indicate the status of interfaces within VLANs. The logical port cause and command codes are as follows:

Cause Code

CM_CIRCUIT_CREATED 1
CM_IP_REGISTER 2
CM_IP_NOT_REGISTER 3
CM_IP_MODIFIED 4
CM_LP_STATE_CHG 5
CM_CIRCUIT_REMOVED 6
CM_LP_ADDED 7
CM_LP_REMOVED 8
CM_LP_MODIFIED 9
CM_LP_FAILOVER 10
CM_CIRCUIT_DOWN 11

This log message indicates that a port is added to the VLAN. This can occur when the association to a VLAN changes as the port goes up and down.

Use the show circuit command to list the VLANs. Check the status of the ports of the VLAN or determine whether the VLAN is active.

CSDPEER-7: LR Send list too 
small !!! 

The number of domain names being sent by the peer exceeds the size of the CSS list. You can configure this parameter through the (config) dns-peer command. Cisco Systems recommends that you configure the receive and send slots with the same value. The default slot value is 255.

FLOWMGR-7: Exceeded outflow SYN 
count

For a Layer 5 rule, the CSS is trying to establish a connection with the backend server. The CSS sent four SYNs to the backend server and did not get a response.

For the CSS to attempt to establish a connection with the backend server then on the front side, the CSS saw:

SYN->
<-SYN/ACK
ACK->
GET->

Only after receipt of the GET, the CSS opens up the backend connection and the log message is generated.

When several of these messages occur, this may indicate a bad server. This could be from keepalives, or from regular TCP HTTP traffic. Make sure that the port 80 sockets are not full on the servers.

FLOWMGR-4: Flow manager 
received an illegal message 
with code 10 

One of the ports received an exceeding number of invalid packets and overflowed the fastpath. The flow manager received a control message from the fastpath that was badly formatted. Either it is intermittent hardware and the fastpath is corrupting the packets, or the fastpath is getting streams of invalid packets and some are leaking up to the flow manager.

Use the show ether-errors command to display information for a port with many errors. Try disconnecting the port or changing ports and determine if the errors stop. Note that all code numbers have the same meaning.

IPV4-4:Ipv4IfMgrCctUpdateMsg: 
IF config for circuit 1015 not 
found 
CIRCUIT-4: Error, Circuit 1015 
does not exist. 

A removed circuit is still configured to an ACL or another configuration parameter. Check the CSS configuration.

IPV4-4: Ipv4ReceivePacket: out 
of mbufs 

An mbuf is a data structure in BSD UNIX-based IP stacks (such as the VxWorks stack) that is used for buffering. This indicates that the CSS received a packet that was addressed to one of the CSSs IP addresses, and when attempting to send it up the VxWorks IP stack, it had no buffers left.

Note These buffers are separate from those used for flow setup and forwarding purposes. They are only used when the traffic is sent to the CSS itself, (for example, Telnet session).

If you receive this message, contact Cisco Systems customer support.

IPV4-4: Ipv4SfmArpTx: unknown 
circuit in buffer (2001) 

An ARP TX task is running on the SFM, receiving packets from the SFM, and transmitting them to the proper egress ports. This message includes the circuit number (2001 in this example). If the circuit number for this ARP was down or inactive while the ARP was still being queued in the SFM, the message would appear in the log. An action caused the circuit to be removed while data for that circuit was still in the buffer.

Determine if either all physical interfaces in a circuit VLAN are going up and down, or a configuration change occurred on the VLAN at the time of the message.

IPV4-4: Ipv4SfmForwRx: bad IP 
version received (0) 

The IPV4 receive task received a packet and the IP version is displayed in the parenthesis (). The CSS discards anything that is not Ipv4 Version 4. In this example, it was version 0. If you see many of these messages, it could be a misconfigured device or a DoS attack.

KAL-7: kal_ServiceNotify: 
kalIndex = 24 kalSvcEvent=3
KAL-7: kal_ServiceNotify: 
kalIndex = 31 kalSvcEvent=4
KAL-7: kal_ServiceNotify: 
kalIndex = 49 kalSvcEvent=5

(11000 Series CSS Only)

This message occurs when the CSS is configured with HTTP keepalives (HEAD or GET) and the servers are transitioning between states. The service event (kalSvcEvent) values are:

3 = Alive

4 = Dying

5 = Dead

Check the status of the server.

NETMAN-2: Generic:LINK DOWN for 
13/1 
CIRCUIT-6: Port 13/1 is down 
for circuit VLAN1 
NETMAN-2: Generic:LINK DOWN for 
13/2 
CIRCUIT-6: Port 13/2 is down 
for circuit VLAN1 
NETMAN-2: Generic:LINK DOWN for 
13/3 
CIRCUIT-6: Port 13/3 is down 
for circuit VLAN1 
NETMAN-2: Generic:LINK DOWN for 
13/4 
CIRCUIT-6: Port 13/4 is down 
for circuit VLAN1 
SYSSOFT-3: ONDM: Timeout 
downloading image to EPIF 0 
from the switch. 
SYSSOFT-3: ONDM: Timeout 
downloading image to EPIF 0 
from the switch. 

(11000 Series CSS Only)

EPIF 0 belongs to the first four ports on a FEM. This is usually a problem with the SFM not getting the code to the FEM or the FEM not reading the SFM properly.

In this case, there is a communications problem between the SFP 9/2 and the FEM.

JAN  5 00:31:43 arrowpoint1.com 9/2 
385390 SYSSOFT-3: ONDM: Timeout 
downloading image to EPIF 0 from the 
switch. 
JAN  5 00:31:45 arrowpoint1.com 9/2 
385407 SYSSOFT-3: ONDM: Timeout 
downloading image to EPIF 0 from the 
switch. 

The recommended course of action is to reseat the SFM in slot 9, and the FEM in slot 13 controlled by the SFM, and then power cycle the CSS.

NETMAN-2: Enterprise:Service 
Transition:ServerA -> down
NETMAN-5: Enterprise:Service 
Transition:ServerA -> alive

An information message when the service has transitioned state. Check the status of the server based on the keepalive parameters.

NETMAN-4: 
SNMPAPI:SNMPAPI_Set:SET failure 

A user on the CLI, either through the console or Telnet, entered a wrong command. A Telnet or console session displays this message stating that the command was incorrect.

NETMAN-5: Enterprise: Login 
Failure:vty2 10.6.3.171 Mandy 

The SNMP Enterprise login failure traps are enabled and a user entered an invalid username/password pair. For example, the user typed the wrong username and password three times.

NETMAN-5: Enterprise:Service > 
Transition:nexthop00001 -> down 

The next hop IP address is no longer reachable. When you configure a static route, a internal service is created such that when the service is up, the static route is included in the routing table. If the service goes down, it is removed from the routing table.

Make sure that all of the routes in the routing table are up. The routes may have transitioned states.

NETMAN-5: Generic:LINK UP for 
3/1 
SYSSOFT-7: NP55_connection.c 
512: Connection already open or 
reserved 
SYSSOFT-3: NP55 Driver: 
Connection already open or 
reserved 
SYSSOFT-2: VccAddVc:open conn 
failed w/ stat = -1; iVc 320; 
eVc 290 
FLOWMGR-7: FM_GetIpv4Vc: 
Warning VCC_FP_IPV4_DC failed 

The flow manager tries to reallocate a VC that was already established.

These messages occur when the port is coming up. They do not represent a problem. The messages are also most noticeable at the end of boot time if you connected through the console.

NETMAN-5: Generic:SNMP 
Authentication > Failure from 
x.x.x.x 

A user is trying to use SNMP to poll the CSS, but they have entered the wrong community string.

NETMAN-7: 
clm_ProcessStdAction:ERROR->Act
ion<clms_dir>not found 
NETMAN-7: CLM:ERROR from 
clm_DispatchActionRoutine() 

An invalid CLI command was entered. In this example, a user enter the dir command in debug mode, and gave an invalid directory. For example:

(debug)# dir d: 
NETMAN-7: SNMP:UNKNOWN RSP 
(493512 
NETMAN-7: SNMP:(493512) Index = 
1 <NO_SUCH_NAME> 

A valid SNMP agent (community string matched) is trying to set an invalid object. The CSS does not know what it is.

NETMAN-7: 
TSM:tsm_SendToCLA:ERROR->Write 

This message is associated with line data moving through the stack after a line has been disconnected (Telnet application disconnect). It is at DEBUG level for developer information purposes only.

PORTMAPPER-5: PortUnmap no Port 
mapping found. 
PORTMAPPER-5: PortUnmap no Port 
mapping found. 
PORTMAPPER-5: PortUnmap no Port 
mapping found. 

These error messages refer to the source group running out of portmappers. Increase the portmappers on the source group so that the message does not appear, and users or services do not see a performance or NATing problem.

SYSSOFT-2: VccAddVc:open conn 
failed w/ stat = -1; iVc 320; 
eVc 290 

This message occurs when a port goes up and down. Check the autonegotiation, which could be a mismatch, bad cable, or bad hardware.

SYSSOFT-3: ONDM: Could not open 
file <wsscm.sys> 
SYSSOFT-3: ONDM: Could not 
download Sub-module 8/1. 
SYSSOFT-3: ONDM: Could not open 
file <wssfm.sys> 
SYSSOFT-3: ONDM: Could not 
download Sub-module 6/2. 
SYSSOFT-3: ONDM: Could not 
download Sub-module 6/1. 
SYSSOFT-3: ONDM: Could not 
download Sub-module 5/2 
SYSSOFT-3: ONDM: Could not 
download Sub-module 5/1. 
SYSSOFT-3: ONDM:No Sfm proxy 
for Slot 2. 
SYSSOFT-3: ONDM:No Sfm proxy 
for Slot 1. 

The CSS could not find the image file to load on the disk. There is something wrong with the disk or the file was deleted from the directory.

Contact Cisco Systems customer support.

SYSSOFT-4: IMM Message Not 
Deliverable: 

The "SYSSOFT-4 IMM Message not Deliverable" message appears in the log when a certain queue on the CSS becomes full, overutilized, or needs to state a problem.

All messages of this type look very similar except for the values in the CE, message type, and message queue id field. The easiest way to decipher the message is to look at the CE value.

To determine which message queue is full, take bits 8 to 20 from the CE field and match them to the following message:

OCT 31 21:04:41 7/1 1324 SYSSOFT-4: 
IMM message not deliverable, message 
queue full, ce = 0x30202600, message 
type = 0x370000, message queue id = 
0x8229ec60 

In the CE field for this example, the number is 26.

CE=0xXXXX26XX

Then look at the following IMM messages for a similar message.

All the other information is CSS-specific. This field is constant throughout all versions of CSS software.

SYSSOFT-4: IMM message not 
deliverable, message queue 
full, ce = 0x20204500, message 
type = 0x370000, message queue 
id =0x855761a0 

The ARP transmits queue, which holds 128 entries, is full. These are ARPs that the CSS is generating at bootup or when you assume mastership; it would be all the gratuitous ARPing for the VIPs. When you see this message, that gratuitous ARP packet is lost. The packet will not be resent and the upstream device is not notified about the MAC change in the case of redundancy.

In CSS software, you can configure VIP ranges. With ranges, you could suddenly have thousands of VIPs and these messages would be seen all the time. The CSS automatically rate-limits the number of ARPs that can be sent. The CSS also rate-limits the number of gratuitous ARP requests so that the ARP transmit queue does not overflow.

Note For information on deciphering this message, see the first SYSSOFT-4: IMM Message Not Deliverable: message, Cause and Resolution.

SYSSOFT-4: IMM message not 
deliverable, message queue 
full, ce = 0x21201502, message 
type = 0x370000, message queue 
id = 0x86911170 

This IMM message queue error refers to the VLANMGR_SFM_TID task. This is the queue on the SFP that handles spanning tree events from the SCM. The queue holds 128 entries. Each time this message appears, a spanning-tree protocol (STP) age or state change event is being lost. Three types of packets come to this queue:

SCM BPDUs - At most one per second for each port

BRIDGE_DB_AGE_CHANGE_EVENTS - STP topology changes

VLAN_STP_STATE_CHANGE_EVENTS - Ports are flipping from Blocking, Listening, or Forwarding

In a CSS running normally, these events are rare. We suggest you troubleshoot spanning tree.

Note For information on deciphering this message, see the first SYSSOFT-4: IMM Message Not Deliverable: message, Cause and Resolution.

SYSSOFT-4: IMM message not 
deliverable, message queue 
full, ce = 0x21202700, message 
type = 0x370000, message queue 
id= 0x867495c0 
*********** 
This is the most seen IMM 
message 
********************* 

A queue is getting overrun. This type of log entry occurs when the CSS is receiving a high volume of extraneous traffic. Because the CSS acts as both a router and a bridge, it must examine each packet. This particular queue handles all non-specific and non-IP traffic, including spanning tree BPDU, non-IP bridgeable traffic, ICMP, ARP, UDP fragments, and packets with expired TTL. This should not have any impact on user TCP traffic, because TCP is sent to a different queue.

Under load, especially due to a high number of UDP fragments or different Denial of Service (DoS) attacks, this queue would fill up and the CSS might drop some packets.

If this error appears in the log occasionally, check the show dos command to make sure the site is not under attack. Also, check the network topology to make sure the routing is solid. If the log is filling rapidly with these errors, then a packet capture may be helpful in isolating the cause.

Contact Cisco Systems customer support.

Note For information on deciphering this message, see the first SYSSOFT-4: IMM Message Not Deliverable: message, Cause and Resolution.

SYSSOFT-4: IMM message not 
deliverable, message queue 
full, ce = 0x21203500, message 
type = 0xc0, message queue id = 
0x879c8150 
SYSSOFT-4: IMM message not 
deliverable,  message queue 
full, ce = 0x21203500, message 
type = 0xc0, message queue id =
0x879c8150 
MAR 20 06:25:56 7/1 9 
REDUNDANCY-4: Transition to 
redundancy  backup, master is 
0.0.0.0 

The ASYNC message task processing cannot deliver a message because the queue is full. At bootup time, you can ignore it.

If these are streaming into the log during normal operations, it would warrant more investigation.

Contact Cisco Systems customer support.

Note For information on deciphering this message, see the first SYSSOFT-4: IMM Message Not Deliverable: message, Cause and Resolution.

SYSSOFT-4: IMM message not 
deliverable, message queue 
full, ce = 0x21203800, message 
type = 0x38000e, message queue 
id  = 0x87a1af60 

The SFM_FW_MAP_PORT_MSG cannot be delivered because the message queue is full. The message is sent when an FTP/RealAudio Control PORT, 227 Entering Passive, O (backspace) command is received and causes the CSS to allocate a portmapper port to be used for the data channel that is about to open.

The port uses this notification message (SFM_FW_MAP_PORT_MSG) to inform all other SFMs to allocate the same portmapper resource. The portmapper resource can then be found and used when the data channel SYN comes in any SFM.

The possible cause of this error could be a large amount of FTP/RealAudio coming into the CSS. Increase the number of portmaps in the source group.

Note For information on deciphering this message, see the first SYSSOFT-4: IMM Message Not Deliverable: message, Cause and Resolution.

SYSSOFT-4: IMM message not 
deliverable, message queue 
full, ce = 0x21203800, message 
type = 0x38000f, message queue 
id  = 0x87a1af60 

The SFM_FW_UNMAP_PORT_MSG cannot be delivered because the message queue is full. This message is similar to the previous IMM message except in this case, the CSS is trying to inform all other SFMS to unmap the same portmapper resource. The possible cause of this error could be a large amount of FTP/RealAudio coming into the CSS.

Contact Cisco Systems customer support.

Note For information on deciphering this message, see the first SYSSOFT-4: IMM Message Not Deliverable: message, Cause and Resolution.

SYSSOFT-4: IMM message not 
deliverable, message queue 
full, ce = 0x30202500, message 
type = 0x370000, message queue 
id = 0x8229ec60 

This is the IPV4 Receive message queue on the SCM. The only traffic that reaches this queue is destined for one of the circuit addresses. This traffic includes keepalives, Telnet, SSH, FTP, CAPP, SNMP, XML and so forth.

This message indicates a large number of services with individual keepalives. At times, they can overwhelm this queue. A reconfiguration using global keepalives is needed.

It is possible that someone is attacking the site. This message is of concern and should be investigated. Contact Cisco Systems customer support.

Note For information on deciphering this message, see the first SYSSOFT-4: IMM Message Not Deliverable: message, Cause and Resolution.

SYSSOFT-4: IMM message not 
deliverable, message queue 
full, ce = 0x30202600, message 
type = 0x370000, message queue 
id = 0x8229ec60 

This IMM message queue error refers to the IPV4_ARP_TID. This is a 256-entry queue on the SCM that handles route changes, and MAC address events (moved, down, up).

They are also due to a large number of VIPs. Missing a few messages from this queue is not fatal. Contact Cisco Systems customer support.

Note For information on deciphering this message, see the first SYSSOFT-4: IMM Message Not Deliverable: message, Cause and Resolution.

SYSSOFT-4: IMM message not 
deliverable, message queue 
full, ce = 0x30203900, message 
type = 0x390003, message queue 
id = 0x863eb5b0  
 
(11000 Series CSS Only)

The task ID 0x39 from the CE field is CSD_SCM_TID. The message type of 0x390003 is a SCM_CNT_CREATE. Each time the SFM sees a new request for content, it sends a message to the SCM. This is for hotlist statistics and the show content command. The SFMs overwhelm the SCM with these messages causing the queues to fill up and then this message occurs.

Lower the logging level for syssoft to critical. Contact Cisco Systems customer support.

Note For information on deciphering this message, see the first SYSSOFT-4: IMM Message Not Deliverable: message, Cause and Resolution.

SYSSOFT-4: IMM message not 
deliverable, message queue 
full, ce = 0x30202c05, message 
type = 0x370000, message queue 
id =0x823ade90  
 
(11000 Series CSS Only)

The task ID 0x2c or 44 is the VLANMGR_SCM_TID. This message queue is on the SCM and receives the control STP BPDUs from the SFPs. The control message occurs when the port changes state appearing as if the port is being overrun with STP BPDUs. This might occur on a CSS 11800 in the core of a network. Because the queue is full, you would lose some BPDUs, which is probably not critical.

This message may occur during a link up/down when the bridging status changed. Contact Cisco Systems customer support.

Note For information on deciphering this message, see the first SYSSOFT-4: IMM Message Not Deliverable: message, Cause and Resolution.

Verifying Files(-) Warning, 
Errors were corrected 
Recovered 1 lost clusters

There is a bad block on the disk. Either reformat or replace the disk. Disk replacement is recommended.

VPM rejected flow - Flow exceed 
max Flows on the VC pipe <addr>

An informational message, which does not require any further action.

WCC-7: Route Change for IP 
Address ( x.x.x.x) 

An informational message that an ARP came in on a different port.


Where to Go Next

Chapter 6, Configuring User Profiles and CSS Parameters, provides information on how to configure user profiles and CSS parameters. This chapter also contains information on using the Content API and Command Scheduler features.