Guest

Preview Tool

Cisco Bug: CSCvv61035 - RPD/7.8 : Syslogs still send to syslog server after removal of the LogServer DHCP option

Last Modified

Sep 03, 2020

Products (1)

  • Cisco Remote PHY Shelves

Known Affected Releases

7.8

Description (partial)

Symptom:
When an RPD is configured with DHCP LogServers option to send syslog messages to a syslog server, if the DHCP LogServers option is removed during a DHCP renew, the RPD will remove the LogServer IP from the show dhcp output, however, the syslog messages will STILL be sent to the syslog server.

R-PHY#show interface info

vbh0      Link encap:Ethernet  HWaddr A0:F8:49:6F:EF:48
          inet addr:10.7.62.6  Bcast:10.7.62.255  Mask:255.255.255.0




R-PHY#show dhcp
Interface  IP-Address  Subnet-Mask
vbh0       10.7.62.6   255.255.255.0

Details:
--------------------------------------------------------------------------------
Interface:                    vbh0
AddrType:                     IPv4
TimeServers:                  10.48.88.204
TimeOffset:                   3600
LogServers:                   10.48.88.253
CCAPCores:                    10.27.62.1, 10.27.32.1
R-PHY#
R-PHY#
R-PHY#
R-PHY#!!! Log server removed here.
Invalid input detected at '!!!'
R-PHY#!!! Log server removed here.
Invalid input detected at '!!!'
R-PHY#show dhcp
Interface  IP-Address  Subnet-Mask
vbh0       10.7.62.6   255.255.255.0

Details:
--------------------------------------------------------------------------------
Interface:                    vbh0
AddrType:                     IPv4
TimeServers:                  10.48.88.204
TimeOffset:                   3600
LogServers:
CCAPCores:                    10.27.62.1, 10.27.32.1
R-PHY#

--> LogServers option removed. 

However, the TCPDump on the Syslog server still shows messages for this RPD: 

    10.7.62.6.47881 > 10.48.88.253.514: [udp sum ok] SYSLOG, length: 116
	Facility cron (9), Severity info (6)
	Msg: 2020-09-03T16:25:00.464194+00:00 RPDA0F8496FEF48 INFO  USER root pid 10003 cmd sh /usr/bin/update_seres_date.sh\0x0a

Conditions:
When the DHCP LogServer is initially present and THEN removed during a DHCP renew.
Bug details contain sensitive information and therefore require a Cisco.com account to be viewed.

Bug Details Include

  • Full Description (including symptoms, conditions and workarounds)
  • Status
  • Severity
  • Known Fixed Releases
  • Related Community Discussions
  • Number of Related Support Cases
Bug information is viewable for customers and partners who have a service contract. Registered users can view up to 200 bugs per month without a service contract.