Guest

Preview Tool

Cisco Bug: CSCur79456 - SNMP traps causing mainApp memory leak

Last Modified

Oct 31, 2015

Products (1)

  • Cisco IPS 4200 Series Sensors

Known Affected Releases

7.1(9)E4

Description (partial)

Symptom:
SensorApp invokes oom-killer, which results in a message in /var/log/messages similar the following:
sensor user.warn kernel: sensorApp invoked oom-killer: gfp_mask=0x1201d2, order=0, oomkilladj=0

The log may show that oom-killer was also invoked by  cidcli, and collaborationAp

mainApp is unusually large. mainApp generally uses less than 20MB of resident memory, but when this problem occurs, mainApp can grow to more than 100MB. This would be visible from show technical-support output as shown in top.log, similar to the following example of top output where mainApp is using 393MB of resident memory:
  PID USER      PR  NI  VIRT  RES  SHR S %CPU %MEM    TIME+  COMMAND           
 1187 cids      20   0  660m 393m 8192 S    8 10.1   4:37.75 mainApp

Conditions:
SNMP traps are enabled, and a large number of SNMP traps appears in show statistics notification, similar to:
sensor# show statistics notification 
General
   Number of SNMP set requests = 0
   Number of SNMP get requests = 0
   Number of error traps sent = 50
   Number of alert traps sent = 156017
Bug details contain sensitive information and therefore require a Cisco.com account to be viewed.

Bug Details Include

  • Full Description (including symptoms, conditions and workarounds)
  • Status
  • Severity
  • Known Fixed Releases
  • Related Community Discussions
  • Number of Related Support Cases
Bug information is viewable for customers and partners who have a service contract. Registered users can view up to 200 bugs per month without a service contract.