Preview Tool

Cisco Bug: CSCuj91523 - ESP crash with Netflow and AVC configs

Last Modified

Apr 18, 2019

Products (1)

  • Cisco ASR 1000 Series Aggregation Services Routers

Known Affected Releases


Description (partial)

On an ASR1000 series router, the Embedded Services Processor (ESP) may unexpectedly reload.

On chassis with a removable ESP module (ASR1002, ASR1004, ASR1006, ASR1013) this will result in the router being temporarily unable to forward traffic. If there are two ESP modules in the chassis, the router will fail over to the secondary ESP.

On chassis with an integrated ESP module (ASR1002-X, ASR1001) this will result in a reload of the entire chassis.

The issue was first seen on 15.3(2)S1.

This crash may happen if ALL following items are true:
1.AVC monitor is configured. [It will implicitly start NBAR] It means You have configuration  like:
flow record type performance-monitor avc-monitor
match application name account-on-resolution
performance monitor context art profile application-experience
traffic-monitor application-response-time

2.NBAR MTP is enabled. It may be enabled implicitly as result of protocol pack replace:
ip nbar protocol-pack <pp-file>
Bug details contain sensitive information and therefore require a account to be viewed.

Bug Details Include

  • Full Description (including symptoms, conditions and workarounds)
  • Status
  • Severity
  • Known Fixed Releases
  • Related Community Discussions
  • Number of Related Support Cases
Bug information is viewable for customers and partners who have a service contract. Registered users can view up to 200 bugs per month without a service contract.