Guest

Preview Tool

Cisco Bug: CSCsg31072 - Connection IDs in %FWSM-6-30201x are too big. ->getting parser error

Last Modified

Feb 22, 2014

Products (1)

  • Cisco Security Monitoring, Analysis and Response System

Known Affected Releases

4.2(2)

Description (partial)

Symptom:

MARS not able to parse %FWSM-6-30201x syslog from FWSM3.1 devices

When doing an "Event Raw Messages Report", getting:
parsing error: <166>%FWSM-6-302015: Built outbound UDP connection
146302834182179735 for inside:10.1.1.1/33168 (10.1.1.1/33168) to
outside:10.2.2.1/53 (10.2.2.1/53)


Conditions:

The connection ID from FWSM is bigger then 12 characters.
Bug details contain sensitive information and therefore require a Cisco.com account to be viewed.

Bug Details Include

  • Full Description (including symptoms, conditions and workarounds)
  • Status
  • Severity
  • Known Fixed Releases
  • Related Community Discussions
  • Number of Related Support Cases
Bug information is viewable for customers and partners who have a service contract. Registered users can view up to 200 bugs per month without a service contract.