EEM policy: Syslog ED & logging Discriminator = Crash

SKC-Korotkov-999 · ‎03-15-2012

Hi everyone!

I found a new bug in cisco IOS 15.1(4)M3 when running EEM script with syslog event detector.

If system logging performed using the "logging discriminator" and run concurrently EEM script with syslog event detector, then Cisco router crash and goes to reboot.

Cisco ISR G2 3925E.

Joe Clarke · ‎03-15-2012

Please post the show ver, show region, and show stack output after the crash. Also, please include your EEM and logging discriminator config. Thanks.

SKC-Korotkov-999 · ‎03-16-2012

Hi Joseph!

SHOW VERSION

=============

i3925E-0-(offline)#sho ver

Cisco IOS Software, C3900e Software (C3900e-UNIVERSALK9_NPE-M), Version 15.1(4)M3, RELEASE SOFTWARE (fc1)

Technical Support: http://www.cisco.com/techsupport

Compiled Tue 06-Dec-11 20:22 by prod_rel_team

ass

ROM: System Bootstrap, Version 15.1(1r)T4, RELEASE SOFTWARE (fc1)

i3925E-0-(offline) uptime is 20 hours, 31 minutes

System returned to ROM by bus error at PC 0x14F40AF, address 0x14F40AF at 14:50:19 MSK Thu Mar 15 2012

System restarted at 14:52:14 MSK Thu Mar 15 2012

System image file is "flash0:c3900e-universalk9_npe-mz.SPA.151-4.M3.bin"

Last reload type: Normal Reload

This product contains cryptographic features and is subject to United

States and local country laws governing import, export, transfer and

use. Delivery of Cisco cryptographic products does not imply

third-party authority to import, export, distribute or use encryption.

Importers, exporters, distributors and users are responsible for

compliance with U.S. and local country laws. By using this product you

agree to comply with applicable laws and regulations. If you are unable

to comply with U.S. and local laws, return this product immediately.

A summary of U.S. laws governing Cisco cryptographic products may be found at:

http://www.cisco.com/wwl/export/crypto/tool/stqrg.html

If you require further assistance please contact us by sending email to

export@cisco.com.

Cisco CISCO3925-CHASSIS (revision 1.0) with C3900-SPE200/K9 with 1015808K bytes of memory.

Processor board ID FCZ153920YC

4 Gigabit Ethernet interfaces

DRAM configuration is 72 bits wide with parity enabled.

256K bytes of non-volatile configuration memory.

255744K bytes of ATA System CompactFlash 0 (Read/Write)

License Info:

License UDI:

-------------------------------------------------

Device# PID SN

-------------------------------------------------

*0 C3900-SPE200/K9 FOC15357xxx

Technology Package License Information for Module:'c3900e'

-----------------------------------------------------------------

Technology Technology-package Technology-package

Current Type Next reboot

------------------------------------------------------------------

ipbase ipbasek9 Permanent ipbasek9

security securityk9_npePermanent securityk9_npe

uc None None None

data None None None

Configuration register is 0x2102

SHOW STACK & REGION

====================

i3925E-0-(offline)#show region

Region Manager:

Start End Size(b) Class Media Name

0x00000000 0x000FFFFF 1048576 IText R/W bios

0x00100000 0x3E0FFFFF 1040187392 Local R/W main

0x0010176C 0x04FE31DF 82713204 IText R/O main:text

0x04FE3200 0x096E892F 74471216 IData R/W main:data

0x096E8930 0x0A2FB1DF 12658864 IBss R/W main:bss

0x0A2FB1E0 0x1BFFB1DF 298844160 Iomem R/W main:iomem

0x1BFFB1E0 0x3BFFFFFF 536890912 Local R/W main:main

0x1BFFB1E0 0x3BFFFFFF 536890912 Local R/W main:heap

Free Region Manager:

Start End Size(b) Class Media Name

i3925E-0-(offline)#sho stack

Minimum process stacks:

Free/Size Name

22876/24000 MRIB IPv6 Init Process

23044/24000 MRIB IPv4 Init Process

10080/12000 EEM Shell Director

42216/60000 EEM TCL Proc

10656/12000 Inspect Init Msg

11036/12000 SPAN Subsystem

39432/48000 Init

58616/60000 EEM Auto Registration Proc

10968/12000 Auto Upgrade Startup Process

10696/12000 DIB error message

11052/12000 SASL MAIN

10884/12000 LICENSE AGENT DEFAULT

10876/12000 RADIUS INITCONFIG

5048/6000 Rom Random Update Process

10996/12000 URPF stats

141636/144000 TCP Command

9552/12000 TFTP Read Process

10944/12000 EM Action CNS

38368/48000 Virtual Exec

Interrupt level stacks:

Level Called Unused/Size Name

1 74177501 16476/18000 Network devices

2 0 18000/18000 One Shot Timer

5 3 17872/18000 Console Uart

7 37018943 17916/18000 Clocktick Interrupt

System was restarted by bus error at PC 0x14F40AF, address 0x14F40AF at 14:50:19 MSK Thu Mar 15 2012

C3900e Software (C3900e-UNIVERSALK9_NPE-M), Version 15.1(4)M3, RELEASE SOFTWARE (fc1)

Technical Support: http://www.cisco.com/techsupport

Compiled Tue 06-Dec-11 20:22 by prod_rel_team (current version)

Image text-base: 0x0010176C, data-base: 0x04FE3200

Stack trace from system failure:

FP: 0x1E9B7170, RA: 0x4FDC574

FP: 0x1E9B719C, RA: 0x4FDC527

FP: 0x1E9B71B8, RA: 0x190D227

FP: 0x1E9B7210, RA: 0x190CE69

FP: 0x1E9B7254, RA: 0x190CC2A

FP: 0x1E9B7270, RA: 0x190CBDB

FP: 0x1E9B7288, RA: 0x190E05A

FP: 0x1E9B72BC, RA: 0x285ED30

***************************************************

******* Information of Last System Crash **********

***************************************************

Using flash0:crashinfo_20120315-145019-MSK.