Guest

Preview Tool

Cisco Bug: CSCun13520 - SSC-5 signature update fails due to high sensorApp memory use

Last Modified

Jul 21, 2016

Products (1)

  • Cisco IPS 4200 Series Sensors

Known Affected Releases

6.2(5)E

Description (partial)

Symptom:
Sigupdate fails (sensorApp aborts or is unresponsive to statistics commands) during a signature update.   Prior to the failure the top utility output (from show tech) shows free memory available at 15 Meg or less.

Example Top output (only 10 Meg free):

top -
Mem:    . . .  total  . . . used  . . .   10212k free  . . .

Conditions:
The SSC-5 platform has 500 Meg of available system memory.  The sensorApp process high memory-use condition can occur from a combination of traffic + signature-config + sig-level version + sig-updates and/or sig-tunings.  If the sensorApp memory is high enough that there is only 15 Meg or less available free memory then the signature updates are likely to fail.
Bug details contain sensitive information and therefore require a Cisco.com account to be viewed.

Bug Details Include

  • Full Description (including symptoms, conditions and workarounds)
  • Status
  • Severity
  • Known Fixed Releases
  • Related Community Discussions
  • Number of Related Support Cases
Bug information is viewable for customers and partners who have a service contract. Registered users can view up to 200 bugs per month without a service contract.