One customer which has a PIX 515E (6.2 image) hang once in 10 days. You cannot ping or telnet to the PIX when it hangs. Reboot the PIX solve the problem but it will come back again. Recently this customer change to a new PIX 515E-UR (6.3.1 image) with VPN accelerator card. Since then no problem is reported.
Another customer which has a PIX 515 (5.3 image) hang always, about once in few days time. You cannot ping or telnet to the PIX when it hangs, so I cannot do a "SHOW" to see what is the cause of the hang. I managed to capture the "SHOW" when it is working fine and it is shown as follows:
abc# show traffic
outside:
received (in 136922.220 secs):
722184 packets 378338941 bytes
5 pkts/sec 2010 bytes/sec
transmitted (in 136922.220 secs):
653760 packets 296687914 bytes
4 pkts/sec 2009 bytes/sec
inside:
received (in 136922.220 secs):
2356936 packets 877606859 bytes
17 pkts/sec 6001 bytes/sec
transmitted (in 136922.220 secs):
2204505 packets 975479052 bytes
16 pkts/sec 7030 bytes/sec
dmz:
received (in 136922.220 secs):
1900793 packets 818066961 bytes
13 pkts/sec 5002 bytes/sec
transmitted (in 136922.220 secs):
1965048 packets 770452347 bytes
14 pkts/sec 5030 bytes/sec
abc# show block
SIZE MAX LOW CNT
4 1600 1598 1600
80 400 399 400
256 1000 998 999
1550 1188 705 803
abc# show memory
33554432 bytes total, 19496960 bytes free
abc# show conn count
71 in use, 88 most used
abc# show interface
interface ethernet0 "outside" is up, line protocol is up
Hardware is i82559 ethernet, address is 0003.6bf6.86fd
IP address 203.125.178.34, subnet mask 255.255.255.240
MTU 1500 bytes, BW 100000 Kbit full duplex
732027 packets input, 385439692 bytes, 0 no buffer
Received 39299 broadcasts, 0 runts, 0 giants
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort
662580 packets output, 299723249 bytes, 0 underruns
0 output errors, 0 collisions, 0 interface resets
0 babbles, 0 late collisions, 0 deferred
0 lost carrier, 0 no carrier
interface ethernet1 "inside" is up, line protocol is up
Hardware is i82559 ethernet, address is 0003.6bf6.86fe
IP address 192.168.1.2, subnet mask 255.255.255.0
MTU 1500 bytes, BW 100000 Kbit full duplex
2381328 packets input, 883087966 bytes, 0 no buffer
Received 60244 broadcasts, 0 runts, 0 giants
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort
2229113 packets output, 989159605 bytes, 0 underruns
0 output errors, 0 collisions, 0 interface resets
0 babbles, 0 late collisions, 0 deferred
0 lost carrier, 0 no carrier
interface ethernet2 "dmz" is up, line protocol is up
Hardware is i82559 ethernet, address is 0002.b35f.ea0c
IP address 192.168.3.200, subnet mask 255.255.255.0
MTU 1500 bytes, BW 100000 Kbit full duplex
1918808 packets input, 827004643 bytes, 0 no buffer
Received 4160 broadcasts, 0 runts, 0 giants
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort
1982237 packets output, 774854945 bytes, 0 underruns
0 output errors, 0 collisions, 0 interface resets
0 babbles, 0 late collisions, 0 deferred
0 lost carrier, 0 no carrier
I don't see any problem here. My customer keep asking me whether it is a hardware faulty and I really don't know how to answer him, Anyone care to enlighten me? Can this problem be solved by upgrading the image to 6.3.1?
