Guest

Preview Tool

Cisco Bug: CSCut16701 - ORNL: Huge number in now file fragment counters

Last Modified

Nov 13, 2016

Products (1)

  • Cisco Firepower Management Center

Known Affected Releases

2.9.7.1

Description (partial)

Symptom:
perfstats_5x -C < file-contents/var/sf/detection_engines/f90407e2-5a28-11e4-ab71-2a41ff2cc434/instance-1/now  
203 statistics lines read

                 Pkts Recv   :    3342637          0    7545263 
                 Pkts Drop   :    2511353          0    5454321 
                 Pkts Blocked:          0          0          0 
                    Mbits/Sec:      103.9        4.9      214.1
                    Drop Rate:     29.34%         0%     57.23%
                   Alerts/Sec:        0.0        0.0        0.0
                   K-Pkts/Sec:       11.2        1.3       25.2
                Avg Bytes/Pkt:     1005.2      419.0     1297.0
                  Pat-Matched:       84.7       19.4      160.9
                     Syns/Sec:       37.0       17.8      323.9
                  SynAcks/Sec:       26.8       15.2       45.3
      New Sessions Cached/Sec:       36.5       23.1       61.1
       Midstream Sessions/sec:        1.8        0.0        2.7
    Sessions Del fr Cache/Sec:       35.9        8.9      189.9
          Closed Sessions/sec:        8.3        0.0       15.9
        TimedOut Sessions/sec:      121.3        0.0      284.1
          Pruned Sessions/sec:        0.0        0.0        0.0
   Dropped Async Sessions/sec:        0.0        0.0        0.0
          Max Cached Sessions:    70162.0
      Current Cached Sessions:    60773.2
Current Sessions Initializing:    56972.0
 Current Sessions Established:     5750.5
     Current Sessions Closing:    38478.9
          Max Cached Sessions:    70162.0
      Max Sessions (Interval):    64719.1
           Stream Flushes/Sec:      113.6       56.0      596.8
  Stream Session Cache Faults:        0.0 
Stream Session Cache Timeouts:    36327.7 
         New UDP Sessions/Sec:       58.6        0.0      125.9
         UDP Sessions Del/Sec:       58.5        0.0      125.9
         Current UDP Sessions:    77079.4
             Max UDP Sessions:    77082.0
        Attribute Table Hosts:        0.0        0.0        0.0
      Attribute Table Reloads:        0.0
             Frag-Creates/Sec:        2.2        0.0        8.5
           Frag-Completes/Sec:        0.0        0.0        3.5
             Frag-Inserts/Sec:        2.3        0.4       14.9
             Frag-Deletes/Sec:        3.8        0.0       19.6
           Frag-AutoFrees/Sec:        2.5        0.0       12.6
             Frag-Flushes/Sec:        0.0        0.0        3.5
                Current Frags:  7996618120622861312.0
                    Max Frags:  11540573878626174976.0
                Frag-Timeouts:    37760.0
                  Frag-Faults:     1013.1
                 CPU  0 Usr %:        0.0        0.0        0.0
                 CPU  0 Sys %:       19.2        0.0       22.5


perfstats_5x -C < file-contents/var/sf/detection_engines/7525794a-5a2a-11e4-be83-99039cb4be39/instance-1/now  
205 statistics lines read

                 Pkts Recv   :    3403771          0    7642259 
                 Pkts Drop   :    2564883          0    5375330 
                 Pkts Blocked:          0          0          0 
                    Mbits/Sec:      106.5        4.5      241.4
                    Drop Rate:     29.12%     0.112%     69.31%
                   Alerts/Sec:        0.0        0.0        0.0
                   K-Pkts/Sec:       11.5        1.3       25.5
                Avg Bytes/Pkt:      997.2      397.0     1325.0
                  Pat-Matched:       84.7       19.5      160.8
                     Syns/Sec:       37.7       12.8      368.0
                  SynAcks/Sec:       27.1       15.4       45.2
      New Sessions Cached/Sec:       36.8       22.8       61.1
       Midstream Sessions/sec:        1.8        0.0        3.6
    Sessions Del fr Cache/Sec:       36.3        7.5      191.1
          Closed Sessions/sec:        8.4        0.0       15.9
        TimedOut Sessions/sec:      111.5        0.0      274.5
          Pruned Sessions/sec:        0.0        0.0        0.0
   Dropped Async Sessions/sec:        0.0        0.0        0.0
          Max Cached Sessions:    70274.0
      Current Cached Sessions:    61055.5
Current Sessions Initializing:    57211.9
 Current Sessions Established:     5639.3
     Current Sessions Closing:    38994.5
          Max Cached Sessions:    70274.0
      Max Sessions (Interval):    64973.8
           Stream Flushes/Sec:      119.4       33.5      594.3
  Stream Session Cache Faults:        0.0 
Stream Session Cache Timeouts:    33360.5 
         New UDP Sessions/Sec:       59.0        0.0      125.9
         UDP Sessions Del/Sec:       59.1        0.0      127.4
         Current UDP Sessions:    74726.8
             Max UDP Sessions:    77079.0
        Attribute Table Hosts:        0.0        0.0        0.0
      Attribute Table Reloads:        0.0
             Frag-Creates/Sec:        2.4        0.0        8.4
           Frag-Completes/Sec:        0.0        0.0        2.3
             Frag-Inserts/Sec:        2.4        0.2       21.9
             Frag-Deletes/Sec:        3.9        0.0       20.3
           Frag-AutoFrees/Sec:        2.5        0.0       14.2
             Frag-Flushes/Sec:        0.0        0.0        2.3
                Current Frags:  7738634099214740480.0
                    Max Frags:  11158030561658462208.0
                Frag-Timeouts:    38566.0
                  Frag-Faults:     1029.2


SWVERSION=5.4.0.1
SWBUILD=59
MODEL_CLASS="3D Sensor"
MODEL="3D8140"



Output of rpm -qa --last:
sf-linux-os-5.4.0-126                         Wed Oct 22 19:42:50 2014
sh-1.0.0-1                                    Wed Oct 22 19:42:50 2014
Sourcefire_3D_Device_S3_Patch-5.4.0.1-59      Wed Feb 18 15:17:06 2015
Sourcefire_IMS-5.4.0-763                      Wed Oct 22 19:42:57 2014
Sourcefire_Network_Sensor-S3-5.4.0-763        Wed Oct 22 19:43:11 2014
Sourcefire_Product_Family-NS-5.4.0-763        Wed Oct 22 19:43:06 2014

/var/Customer_Files/Phils_Beta_Customers/ORNL/0302

Conditions:
Both sensors showing the problem:
SWVERSION=5.4.0.1
SWBUILD=59
MODEL="3D8140"

Output of rpm -qa --last:
sf-linux-os-5.4.0-126                                            Wed Oct 22 19:42:50 2014
sh-1.0.0-1                                                             Wed Oct 22 19:42:50 2014
Sourcefire_3D_Device_S3_Patch-5.4.0.1-59      Wed Feb 18 15:17:06 2015
Sourcefire_IMS-5.4.0-763                                   Wed Oct 22 19:42:57 2014
Sourcefire_Network_Sensor-S3-5.4.0-763         Wed Oct 22 19:43:11 2014
Sourcefire_Product_Family-NS-5.4.0-763          Wed Oct 22 19:43:06 2014
Bug details contain sensitive information and therefore require a Cisco.com account to be viewed.

Bug Details Include

  • Full Description (including symptoms, conditions and workarounds)
  • Status
  • Severity
  • Known Fixed Releases
  • Related Community Discussions
  • Number of Related Support Cases
Bug information is viewable for customers and partners who have a service contract. Registered users can view up to 200 bugs per month without a service contract.