Guest

Preview Tool

Cisco Bug: CSCvu29660 - Block exhaustion snapshot not created when available blocks goes to zero

Last Modified

Oct 07, 2020

Products (1)

  • Cisco ASA 5500-X Series Firewalls

Known Affected Releases

9.12(3.12) 9.8

Description (partial)

Symptom:
Block exhaustion snapshot outputs do not display any information when any of the blocks, listed under "show blocks" output, gets depleted.

For instance:

------------------ show blocks ------------------

  SIZE    MAX    LOW    CNT  INUSE   HIGH
     0   8700   8668   8700      0      0
     4   1700   1697   1699      0      1
    80   9000   8090   9000      0      9
   256   9164   7231   9158      3     65
  1550  36374  36169  36369      2     74
  2048   8100   7199   8100      0      0
  2560   8192   8190   8192      0      0
  4096    100     99    100      0      0
  8192    100    100    100      0      0
  9344  20000      0  19954      0      0        <<<<<
 16384    320    317    320      0      0

As seen on the above example, the device in question experienced a complete depletion of the 9344 block size, and this should trigger a snapshot to be generated and recorded under the command "sh blocks exhaustion snapshot", but due to this defect this does not happen.

Conditions:
ASA or FTD running on any existing platform and that have experienced a depletion of above mentioned blocks.
Bug details contain sensitive information and therefore require a Cisco.com account to be viewed.

Bug Details Include

  • Full Description (including symptoms, conditions and workarounds)
  • Status
  • Severity
  • Known Fixed Releases
  • Related Community Discussions
  • Number of Related Support Cases
Bug information is viewable for customers and partners who have a service contract. Registered users can view up to 200 bugs per month without a service contract.