Cisco Bug: CSCsg31072 - Connection IDs in %FWSM-6-30201x are too big. ->getting parser error
Feb 22, 2014
- Cisco Security Monitoring, Analysis and Response System
Known Affected Releases
Symptom: MARS not able to parse %FWSM-6-30201x syslog from FWSM3.1 devices When doing an "Event Raw Messages Report", getting: parsing error: <166>%FWSM-6-302015: Built outbound UDP connection 146302834182179735 for inside:10.1.1.1/33168 (10.1.1.1/33168) to outside:10.2.2.1/53 (10.2.2.1/53) Conditions: The connection ID from FWSM is bigger then 12 characters.
Bug details contain sensitive information and therefore require a Cisco.com account to be viewed.
Bug Details Include
- Full Description (including symptoms, conditions and workarounds)
- Known Fixed Releases
- Related Community Discussions
- Number of Related Support Cases