Guest

Preview Tool

Cisco Bug: CSCvv71435 - ASA 256 and 1550 block depletion causes DMA Memory unreleased allocation

Last Modified

Oct 12, 2020

Products (1)

  • Cisco Adaptive Security Appliance (ASA) Software

Known Affected Releases

9.12(3.12) 9.8(4.15)

Description (partial)

Symptom:
Anyconnect users could face problems connecting to the ASA

Unable to connect to ASDM. 

Low DMA Memory in models with a smaller pool. Typically, less than 2 MBs can be considered low in ASA 5500-X models.

From show memory detail output: 

MEMPOOL_DMA POOL STATS:

Non-mmapped bytes allocated =    230686720
Number of free chunks       =          839
Number of mmapped regions   =            0
Mmapped bytes allocated     =            0
Max memory footprint        =    230686720
Keepcost                    =          240
Max contiguous free mem     =        18848
Allocated memory in use     =    229185408
Free memory                 =      1501312

Block count for 256 and 1550 LOW has reached 0. 

------------------ show blocks ------------------

  SIZE    MAX    LOW    CNT
     0   2950   2917   2950
     4    400    398    399
    80   2500   2456   2500
   256  13928      0  13909
  1550  16916      0  16872
  2048   8848   8845   8848
  2560   2964   2961   2964
  4096    100     98    100
  8192    100    100    100
  9344    100    100    100
 16384    154    154    154
 65536     16     16     16

Conditions:
Anyconnect is enabled
Logging is enabled.
Bug details contain sensitive information and therefore require a Cisco.com account to be viewed.

Bug Details Include

  • Full Description (including symptoms, conditions and workarounds)
  • Status
  • Severity
  • Known Fixed Releases
  • Related Community Discussions
  • Number of Related Support Cases
Bug information is viewable for customers and partners who have a service contract. Registered users can view up to 200 bugs per month without a service contract.