illegible logging

[vlehemonet1]

Hello, 

We have an issue with the logging in a 2960 stack. Actually we have the same problem on 3 different stack (same IOS version, same models)

As you can see below the source appear illegible. They appear in the same format on our syslog server too.

Anyone have an idea of what can be the source of this issue ?

Jul 15 10:37:34.623 EDT: %SEC_LOGIN-5-LOGIN_SUCCESS: Login Success [user: xxxxx] [Source: ghijklmnopqrstuvwxyz{|}^@^A^B^C^D^E^F

^K^L

^N^O^P^Q^R^S^T^U^V^W^X^Y^Z^[^\^]^^^_ !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{] [localport: 22] at 10:37:34 EDT Wed Jul 15 2015

Jul 15 10:38:52.053 EDT: %SEC_LOGIN-5-LOGIN_SUCCESS: Login Success [user: xxxxx] [Source: ghijklmnopqrstuvwxyz{|}^@^A^B^C^D^E^F

^K^L

^N^O^P^Q^R^S^T^U^V^W^X^Y^Z^[^\^]^^^_ !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{] [localport: 22] at 10:38:52 EDT Wed Jul 15 2015

Jul 15 10:39:56.635 EDT: %SEC_LOGIN-5-LOGIN_SUCCESS: Login Success [user: xxxxx] [Source:^@^A^B^C^D^E^F

^K^L

^N^O^P^Q^R^S^T^U^V^W^X^Y^Z^[^\^]^^^_ !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{] [localport: 22] at 10:39:56 EDT Wed Jul 15 2015

Jul 15 10:45:18.809 EDT: %SEC_LOGIN-5-LOGIN_SUCCESS: Login Success [user: xxxxxx] [Source: LMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}^@^A^B^C^D^E^F

^K^L

Switch Ports Model              SW Version            SW Image

------ ----- -----              ----------            ----------

*    1 52    WS-C2960X-48FPD-L  15.0(2a)EX5           C2960X-UNIVERSALK9-M

     2 52    WS-C2960X-48FPD-L  15.0(2a)EX5           C2960X-UNIVERSALK9-M

     3 52    WS-C2960X-48FPD-L  15.0(2a)EX5           C2960X-UNIVERSALK9-M

     4 52    WS-C2960X-48FPD-L  15.0(2a)EX5           C2960X-UNIVERSALK9-M

Thanks,

[Gregory S]

I have the same problem on a single 2960X switch.  It's a brand new switch running 15.0(2a)EX5.  My biggest problem is that if you attempt to telnet/ssh to the switch from a PC with a 172.x.x.x address, it will cause the switch to crash within seconds.  You don't even have to enter a valid username to make it crash.  To resolve the crash issue, I disabled the login logging.  But now I don't have a record of login attempts.  I haven't tried a newer IOS version yet because the switch is in production and 3,000 miles away.  I've never had this issue with any other Cisco switch model.

[pierre.gorodko]

We have the same problems with 2960X-48FPS-L and IOS 15.0(2a)EX5

-login message source IP is garbled

-switch crash and reboot if login from source IP 172.x.x.x (no crash if source IP is 10.x.x.x)

[kbkendrick04]

Same issue here.

Have there been any updates regarding this issue?

thanks