topic Re: IPS system messages in Network Security https://community.cisco.com/t5/network-security/ips-system-messages/m-p/946929#M79618 <HTML><HEAD></HEAD><BODY><P>It looks like the sensor has been oversubscribed on multiple occasions, and likely as a</P><P>result, the heartbeat signal between the ASA and the AIP-SSM has lost</P><P>sync (triggering the "Failed Service Module" status and the FO).</P><P></P><P></P><P>What I would recommend in this case is to confirm you are not sending</P><P>too much traffic to the AIP-SSM, and also, that its configuration is not</P><P>too taxing (i.e. lots of Product Alert actions occurring, IP Logging</P><P>enabled, atomic-ip type SIGs firing often, etc.).</P><P></P></BODY></HTML> Wed, 02 Jul 2008 12:57:29 GMT ebreniz 2008-07-02T12:57:29Z IPS system messages https://community.cisco.com/t5/network-security/ips-system-messages/m-p/946928#M79614 <P>where can I find more information about the below messages? The IPS version is 6.0(4)E1 S319</P><P></P><P>Error TX Queue full, lost buf 464</P><P>Error TX Queue full, no yet lost buf 464 if = 0</P><P>DBMemoryResourcesCritical 2 Hits 2Total.</P> Sun, 10 Mar 2019 11:10:05 GMT https://community.cisco.com/t5/network-security/ips-system-messages/m-p/946928#M79614 5creedus 2019-03-10T11:10:05Z Re: IPS system messages https://community.cisco.com/t5/network-security/ips-system-messages/m-p/946929#M79618 <HTML><HEAD></HEAD><BODY><P>It looks like the sensor has been oversubscribed on multiple occasions, and likely as a</P><P>result, the heartbeat signal between the ASA and the AIP-SSM has lost</P><P>sync (triggering the "Failed Service Module" status and the FO).</P><P></P><P></P><P>What I would recommend in this case is to confirm you are not sending</P><P>too much traffic to the AIP-SSM, and also, that its configuration is not</P><P>too taxing (i.e. lots of Product Alert actions occurring, IP Logging</P><P>enabled, atomic-ip type SIGs firing often, etc.).</P><P></P></BODY></HTML> Wed, 02 Jul 2008 12:57:29 GMT https://community.cisco.com/t5/network-security/ips-system-messages/m-p/946929#M79618 ebreniz 2008-07-02T12:57:29Z Re: IPS system messages https://community.cisco.com/t5/network-security/ips-system-messages/m-p/946930#M79622 <HTML><HEAD></HEAD><BODY><P>The ASA failover due to IPS oversubscription is a known issue: CSCso78274. This is resolved in 6.0(5).</P><P></P><P>The DB crit messages are an indication that the senosr inspector database is running out of memory. This could be due to the signature config or the amount/type of traffic (oversubscription).</P><P></P><P>I would recommend upgrading to 6.0.5, tuning the signature config, and reducing the traffic feed.</P></BODY></HTML> Wed, 02 Jul 2008 14:35:32 GMT https://community.cisco.com/t5/network-security/ips-system-messages/m-p/946930#M79622 jamesand 2008-07-02T14:35:32Z Re: IPS system messages https://community.cisco.com/t5/network-security/ips-system-messages/m-p/946931#M79625 <HTML><HEAD></HEAD><BODY><P>Thanks, yes we are planning another round of upgrades to our fleet so that one will be taken care of.</P></BODY></HTML> Wed, 02 Jul 2008 15:36:59 GMT https://community.cisco.com/t5/network-security/ips-system-messages/m-p/946931#M79625 5creedus 2008-07-02T15:36:59Z