04-08-2005 08:44 AM - edited 03-10-2019 01:22 AM
I get the following message after running my idsm2 module for a while :
Error: getAnalysisEngineStatistics : ct-sensorApp.588 not responding, please check system processes - The connect to the specified Io::ClientPipe failed.
If I restart the module, I can access the web interface fine and config the module. But after running for a while, the web interface dies and I get the above error. Any ideas?
04-08-2005 11:09 AM
If this is version 4.X then you will probably need to install the 4.1(4g) patch. Several sensorApp related issues that could be causing this symptom are fixed in the patch.
04-08-2005 01:37 PM
I am running the version 5 stuff.
04-11-2005 08:01 AM
There are a few known issues for the 5.0 version with the symptoms you are seeing. I would recommend first applying the 5.0(2) service pack (just posted). If that does not fix your issue then you should open a cisco TAC case so we can diagnose this issue.
You could also post the output from the cli "show tech" command to this forum so I can try to ID the issue.
04-12-2005 08:19 AM
Thanks. It seems to be running much better now.
07-06-2005 11:13 PM
I get the same error than you, laneclark. To be concise, it says:
Error connecting to sensor. Failed to load sensor-errSystem Error-ct-sensorApp.466 not responding, please check system processes - The connect to the specified lo::ClientPipe failed.
Exiting IDM.
When this happens, i can do actually ssh into the IDSM2 and if I type 'show ver' i realize AnalysisEngine is 'NotRunning'.
How can I restart this service without having to reboot the sensor?
How can I solve this error?
I'm already using IPS version 5.0(2)S178.0 .
Any idea?
07-12-2005 08:05 AM
If the AnalysisEngine continues to fail, then you should open a case with the Cisco TAC. There is an engineering patch, 5.0(3p1, available that addresses several issues that may be causing this.
07-12-2005 10:39 PM
I still haven't found the answer... but I wonder if this may be originated by the fact of the ISM2 to try to process too much traffic.
I mean, the IDSM2's interfaces are 1 Gbps and the maximum process speed is 600 Mbps. I think this is correct.
I'm using SPAN to redirect traffic to the sensor. And maybe the sensor has too much traffic to process than it is able to. What I mean for 'too much traffic' is, for example, peaks of 1 Gbps to 2 Gbps in only one VLAN -the most bandwith-consumer-. And I've got near 25 VLANs in SPAN.
Do you think this is a possible reason of hanging the AnalysisEngine process?
07-14-2005 02:22 PM
Heavy traffic may be causing one of the memory related bugs that is fixed in the latest patch 5.0(3p1).
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide