topic Re: Crashinfo analysis in Network Security https://community.cisco.com/t5/network-security/crashinfo-analysis/m-p/3951207#M5199 Is there any way to know if both firewalls have been restarted and one crashinfo is event 2019 and the other is 2016 ? Thu, 31 Oct 2019 14:59:25 GMT RRFS578780 2019-10-31T14:59:25Z Crashinfo analysis https://community.cisco.com/t5/network-security/crashinfo-analysis/m-p/3950085#M5122 <P>The firewalls restarted alone, but the Standby box crashinfo generated it on the event date, but the active box crashinfo is 2016, would you like to know the reason for this?</P><P>&nbsp;</P><P>Another thing I noticed was that crashinfo's Appliance Software Version is different, even firewalls using the same version of IOS.</P><P>&nbsp;</P><P>Is there a tool for me to analyze crashinfo?</P><P>&nbsp;</P><P>Active## show tech-support</P><P>Cisco Adaptive Security Appliance Software Version 9.5(1)<BR />Device Manager Version 7.6(1)</P><P>Compiled on Wed 12-Aug-15 12:22 PDT by builders<BR />System image file is "disk0:/asa951-smp-k8.bin"<BR />Config file at boot was "startup-config"</P><P>Active up 8 days 12 hours<BR />failover cluster up 8 days 12 hours</P><P>================================================================================</P><P>Standby## show tech-support</P><P>Cisco Adaptive Security Appliance Software Version 9.5(1)<BR />Device Manager Version 7.6(1)</P><P>Compiled on Wed 12-Aug-15 12:22 PDT by builders<BR />System image file is "disk0:/asa951-smp-k8.bin"<BR />Config file at boot was "startup-config"</P><P>Standby up 8 days 7 hours<BR />failover cluster up 8 days 7 hours</P><P>================================================================================</P><P>Active# show crashinfo<BR />: Saved_Crash SCH enabled</P><P>Register dump: Thread 0 in thread group<BR />other: Unknown<BR />r8 0x0000000040002015<BR />r9 0x0000000000000000<BR />r10 0x0000000000c487e6<BR />r11 0x0000000000000000<BR />r12 0x00007fff75f6df30<BR />r13 0x00007fff75f6ddc8<BR />r14 0x0000000000e8e9f0<BR />r15 0x0000000000000000<BR />rdi 0x00007fffb42a6600<BR />rsi 0x00007fffeef66414<BR />rbp 0x00007fffd910e7d0<BR />rbx 0x00007fffeef66374<BR />rdx 0x0000000000000028<BR />rax 0x00007fff99215900<BR />rcx 0x0000000000000000<BR />rsp 0x00007fffd910e7a0<BR />rip 0x0000000000e8f14f<BR />eflags 0x0000000000003206<BR />csgsfs 0x0000000000000033<BR />error code n/a<BR />vector 0x0000000000000000<BR />old mask 0xffffffde3e3b5a05<BR />cr2 0x0000000000000000</P><P>Traceback: Thread 0 in thread group<BR />0: 0x00000000019fe35c<BR />1: 0x00000000019feb8b<BR />2: 0x0000000002811386<BR />3: 0x0000000000721a3d<BR />4: 0x000000000170b080<BR />5: 0x000000000171476c<BR />6: 0x00000036e0208201</P><P>Register dump: Thread 1 in thread group<BR />other: Unknown<BR />r8 0x0000000000000000<BR />r9 0x0000000000000001<BR />r10 0x0000000000000001<BR />r11 0x0000000000003202<BR />r12 0x0000000000000066<BR />r13 0x0000000000000000<BR />r14 0x00007fffdbd97920<BR />r15 0x00007fffdbd97580<BR />rdi 0x0000000004d307b0<BR />rsi 0x0000000001000000<BR />rbp 0x00007fffd9116f60<BR />rbx 0x00007fffdbd97cc0<BR />rdx 0x001e1aa400000000<BR />rax 0x000000004f7308c1<BR />rcx 0x000f0d5226c1b400<BR />rsp 0x00007fffd9116ee0<BR />rip 0x00000000019fe29f<BR />eflags 0x0000000000003206<BR />csgsfs 0x0000000000000033<BR />error code n/a<BR />vector 0x0000000000000000<BR />old mask 0xffffffde3e3a5a05<BR />cr2 0x0000000000000000</P><P>Traceback: Thread 1 in thread group<BR />0: 0x000000000044f332<BR />1: 0x00000036dfe46210<BR />2: 0x000000000170bf0f<BR />3: 0x000000000042479b<BR />4: 0x00000036dfe21e05</P><P>Register dump: Thread 2 in thread group<BR />other: Unknown<BR />r8 0x0000000000000000<BR />r9 0x0000000000000000<BR />r10 0x0000000000000000<BR />r11 0x0000000000000000<BR />r12 0x00000000000000c8<BR />r13 0x0000000005d86900<BR />r14 0x00007fffc1696c80<BR />r15 0x0000000000000000<BR />rdi 0x0000000007dee128<BR />rsi 0x00007fffd9011000<BR />rbp 0x00007fffd900d9a0<BR />rbx 0x0000000000000064<BR />rdx 0x00007fffd9011000<BR />rax 0x0000000006b16780<BR />rcx 0x00007fffd9011000<BR />rsp 0x00007fffd900d888<BR />rip 0x00000000028104ef<BR />eflags 0x0000000000003246<BR />csgsfs 0x0000000000000033<BR />error code n/a<BR />vector 0x0000000000000000<BR />old mask 0xffffffde3e3b7a07<BR />cr2 0x0000000000000000</P><P>Traceback: Thread 2 in thread group<BR />0: 0x0000000000721a3d<BR />1: 0x000000000170b080<BR />2: 0x000000000171476c<BR />3: 0x00000036e0208201</P><P>Thread Name: DATAPATH-3-1669<BR />Abort: Unknown<BR />r8 0x00007fffc043f688<BR />r9 0x000000000000de4b<BR />r10 0x0000000000000000<BR />r11 0x0000000000000000<BR />r12 0x000000000286797b<BR />r13 0x0000000000000109<BR />r14 0x000000000296ca90<BR />r15 0x000000000000ff70<BR />rdi 0x0000000002dc8613<BR />rsi 0x000000000286797b<BR />rbp 0x00007fffd8e0a420<BR />rbx 0x0000000002dc8613<BR />rdx 0x0000000000000109<BR />rax 0x0000000000000000<BR />rcx 0x00007fffc9daaf00<BR />rsp 0x00007fffd8e0ac90<BR />rip 0x0000000002326e91<BR />eflags 0x0000000000003293<BR />csgsfs 0x0000000000000033<BR />error code n/a<BR />vector 0x0000000000000020<BR />old mask 0xffffffde3e3b7a07<BR />cr2 0x0000000000000000</P><P>Cisco Adaptive Security Appliance Software Version 9.4(1)</P><P>Compiled on Sat 21-Mar-15 11:43 PDT by builders<BR />Hardware: ASA5585-SSP-10<BR />Crashinfo collected on 03:33:36.471 BRST Sat Apr 2 2016</P><P>================================================================================</P><P>Standby# show crashinfo<BR />: Saved_Crash SCH enabled</P><P>Register dump: Thread 0 in thread group<BR />other: Unknown<BR />r8 0x0000000000000000<BR />r9 0x0000000000000008<BR />r10 0x0000000000000040<BR />r11 0x0000000000000008<BR />r12 0x00007fbc20e4f260<BR />r13 0x00007fbc04ca7bd0<BR />r14 0x00007fbc20e4f320<BR />r15 0x00007fbc4b26cb90<BR />rdi 0x00007fbb8ec4f7d8<BR />rsi 0x00007fbc20e4f260<BR />rbp 0x00007fbc20e4f250<BR />rbx 0x00007fbc20e4f410<BR />rdx 0x0000000000000000<BR />rax 0x00007fbc45d02340<BR />rcx 0x000000000000003a<BR />rsp 0x00007fbc20e4f248<BR />rip 0x00007fbc428cb8d4<BR />eflags 0x0000000000003297<BR />csgsfs 0x0000000000000033<BR />error code n/a<BR />vector 0x0000000000000000<BR />old mask 0xffffffde3e3b5a05<BR />cr2 0x0000000000000000</P><P>Traceback: Thread 0 in thread group<BR />0: 0x00007fbc428d544f<BR />1: 0x00007fbc428f6103<BR />2: 0x00007fbc43286191<BR />3: 0x00007fbc432934da<BR />4: 0x00007fbc432943d4<BR />5: 0x00007fbc43296d8f<BR />6: 0x00007fbc44c00db5<BR />7: 0x00007fbc44c02274<BR />8: 0x00007fbc44c0297e<BR />9: 0x00007fbc44bfda93<BR />10: 0x00007fbc43a08623<BR />11: 0x00007fbc44bfa1a0<BR />12: 0x00007fbc44bfa5c1<BR />13: 0x00007fbc44bfae04<BR />14: 0x00007fbc42931ee0<BR />15: 0x00007fbc43a31f18<BR />16: 0x00007fbc43a3bcfc<BR />17: 0x00007fbc41298201</P><P>Register dump: Thread 1 in thread group<BR />other: Unknown<BR />r8 0x00000000000007ff<BR />r9 0x00007fbc02b01ac8<BR />r10 0x0000000000000008<BR />r11 0x0000000000000000<BR />r12 0x00000000963a7862<BR />r13 0x00000000963a7862<BR />r14 0x0000000000000000<BR />r15 0x0000000000000046<BR />rdi 0x00007fbb2a3db580<BR />rsi 0x00007fbc23e77240<BR />rbp 0x00007fbc20c4dfe0<BR />rbx 0x00007fbb2a3db6f0<BR />rdx 0x00007fbc02b01ac0<BR />rax 0x00007fbc0219e040<BR />rcx 0x0000000000000001<BR />rsp 0x00007fbc20c4df10<BR />rip 0x00007fbc4337ab4b<BR />eflags 0x0000000000003206<BR />csgsfs 0x0000000000000033<BR />error code n/a<BR />vector 0x0000000000000000<BR />old mask 0xffffffde3e3b7a07<BR />cr2 0x0000000000000000</P><P>Traceback: Thread 1 in thread group<BR />0: 0x00007fbc44c03972<BR />1: 0x00007fbc433796c3<BR />2: 0x00007fbc4319f939<BR />3: 0x00007fbc43d19920<BR />4: 0x00007fbc43d1bf09<BR />5: 0x00007fbc44c004c4<BR />6: 0x00007fbc44c011fd<BR />7: 0x00007fbc44c02274<BR />8: 0x00007fbc44c0297e<BR />9: 0x00007fbc44bfda93<BR />10: 0x00007fbc43a08623<BR />11: 0x00007fbc44bfa1a0<BR />12: 0x00007fbc44bfa5c1<BR />13: 0x00007fbc44bfae04<BR />14: 0x00007fbc42931ee0<BR />15: 0x00007fbc43a31f18<BR />16: 0x00007fbc43a3bcfc<BR />17: 0x00007fbc41298201</P><P>Register dump: Thread 2 in thread group<BR />other: Unknown<BR />r8 0x0000000000000200<BR />r9 0x00007fbc20b74b90<BR />r10 0x0000000000000000<BR />r11 0x0000000000000000<BR />r12 0x0008eb94b5189f40<BR />r13 0x00007fbc49208790<BR />r14 0xffffffffffffdf90<BR />r15 0x00007fbc41df2378<BR />rdi 0x0008eb94b4cc5400<BR />rsi 0x0000000000000000<BR />rbp 0x00007fbc20b4cad0<BR />rbx 0x00007fbc20b51000<BR />rdx 0x000000000011d729<BR />rax 0x0000000069a44fc7<BR />rcx 0x00007fbc20b51000<BR />rsp 0x00007fbc20b4ca70<BR />rip 0x00007fbc44bf9da7<BR />eflags 0x0000000000003213<BR />csgsfs 0x0000000000000033<BR />error code n/a<BR />vector 0x0000000000000000<BR />old mask 0xffffffde3e3b7a07<BR />cr2 0x0000000000000000</P><P>Traceback: Thread 2 in thread group<BR />0: 0x00007fbc44705657<BR />1: 0x00007fbc43aed66c<BR />2: 0x00007fbc43a3fa60<BR />3: 0x00007fbc42f011e2<BR />4: 0x00007fbc4294fbac<BR />5: 0x00007fbc432140cd<BR />6: 0x00007fbc432158c9<BR />7: 0x00007fbc432172e8<BR />8: 0x00007fbc433792a9<BR />9: 0x00007fbc4337b8c3<BR />10: 0x00007fbc43aef04d<BR />11: 0x00007fbc42f13924<BR />12: 0x00007fbc42f1eb17<BR />13: 0x00007fbc42f11dea<BR />14: 0x00007fbc4292ef4d<BR />15: 0x00007fbc44bfae89<BR />16: 0x00007fbc42931ee0<BR />17: 0x00007fbc43a31f18<BR />18: 0x00007fbc43a3bcfc<BR />19: 0x00007fbc41298201</P><P>Thread Name: IKEv2 Daemon<BR />Abort: Unknown<BR />r8 0x0000000000000000<BR />r9 0x00007fbc43a44240<BR />r10 0x0000000000000008<BR />r11 0x0000000000003202<BR />r12 0x00007fbbf31fa130<BR />r13 0x0000000000000007<BR />r14 0x0000000000000007<BR />r15 0x000000000000004f<BR />rdi 0x0000000000000675<BR />rsi 0x000000000000067b<BR />rbp 0x00007fbbf31fa320<BR />rbx 0x000000000000004f<BR />rdx 0x0000000000000006<BR />rax 0x0000000000000000<BR />rcx 0xffffffffffffffff<BR />rsp 0x00007fbbf31f9f88<BR />rip 0x00007fbc3f37a279<BR />eflags 0x0000000000003202<BR />csgsfs 0x0000000000000033<BR />error code n/a<BR />vector 0x0000000000000000<BR />old mask 0xffffffde3e3a5a05<BR />cr2 0x0000000000000000</P><P>Cisco Adaptive Security Appliance Software Version 9.5(1)</P><P>Compiled on Wed 12-Aug-15 12:22 PDT by builders<BR />Hardware: ASA5585-SSP-10<BR />Crashinfo collected on 12:45:24.090 BRST Wed Oct 2 2019</P> Fri, 21 Feb 2020 17:38:30 GMT https://community.cisco.com/t5/network-security/crashinfo-analysis/m-p/3950085#M5122 RRFS578780 2020-02-21T17:38:30Z Re: Crashinfo analysis https://community.cisco.com/t5/network-security/crashinfo-analysis/m-p/3950214#M5125 <P>Hi there! Have you reached out to Cisco TAC for assistance?</P> Wed, 30 Oct 2019 04:45:14 GMT https://community.cisco.com/t5/network-security/crashinfo-analysis/m-p/3950214#M5125 nspasov 2019-10-30T04:45:14Z Re: Crashinfo analysis https://community.cisco.com/t5/network-security/crashinfo-analysis/m-p/3950473#M5198 Not because we don't have support, but I was wondering why crashinfo is dated differently and also with different versions, since IOS version are the same. Wed, 30 Oct 2019 13:25:00 GMT https://community.cisco.com/t5/network-security/crashinfo-analysis/m-p/3950473#M5198 RRFS578780 2019-10-30T13:25:00Z Re: Crashinfo analysis https://community.cisco.com/t5/network-security/crashinfo-analysis/m-p/3951207#M5199 Is there any way to know if both firewalls have been restarted and one crashinfo is event 2019 and the other is 2016 ? Thu, 31 Oct 2019 14:59:25 GMT https://community.cisco.com/t5/network-security/crashinfo-analysis/m-p/3951207#M5199 RRFS578780 2019-10-31T14:59:25Z