PIX and crashinfo

[johnleeee]

Hi all,

I know file system in PIX firewall but I dont know

how can I troubleshoot crash info inside?

We have PIX with PIX OS 6.3.4.

I appreciate any idea.

thanks jl

[spremkumar]

Hi

AFAIK PIX with OS 6.3 and higher, by default, saves information that is generated during a PIX Firewall system crash to Flash memory.

With earlier versions, crash information was only displayed on the console.

To erase the current contents of the crash flash file, enter the following command:

clear crashinfo

To disable saving crash information to Flash memory, enter the following command:

crashinfo save disable

To save test crash information to Flash memory, enter the following command:

crashinfo test

you can use sh crashinfo,sh tech to view crash info as well as the additional diag info.

regds

prem

[johnleeee]

Hi sprem,

thanks for advice. I know commands to show crash info

and I want to know how should I diagnose this crash to gain important informations what happened before.

On our PIX it is quite long message and it looks like after sh tech output was made. But I thought that it is generated after some crash but we didnt observe any crash.

reg jl

[scoclayton]

The information in the 'sh crash' output will mean nothing to you, most likely. Among other things, the output lists the lasts processes that were enacted before the software forced exception. We have internal tools that we can use to map these process numbers to process names that mean a little more to us. You will want to open a TAC case anytime you see a crash on a PIX (obviously, this should never happen) in order to have someone take a look and give you some clues as to what is going on.

Probably not what you were looking to hear but I hope this helps.

Scott

[johnleeee]

Hi Scott,

for me every information is information because Im intersted in resolving problems involved with

cisco device to know more.

On the other hand thats pity I cannot view whats happened.

jl