[c-nsp] Rebooting PIX
Mark Taylor
maillist at smashie.ision.co.uk
Wed Feb 23 11:25:47 EST 2005
> "Sh crash" shows nothing?
There is some info in "sh crash" which I've included below, nothing is
obvious unless some of the traceback information gives anything away:
: Saved_Crash
Thread Name: PIX Garbage Collector (Old pc 0x002f45ac ebp 0x00d83ff0)
Traceback:
0: 00103725
1: 00000000
vector 0x0000000e (page fault)
edi 0x00000003
esi 0x00f7ca34
ebp 0x00d84030
esp 0x00d83ff8
ebx 0x00f87d1c
edx 0x00abd800
ecx 0x0000000a
eax 0x00000000
error code 0x00000002
eip 0x002f454a
cs 0x00000008
eflags 0x123456cd
CR2 0x00000004
Stack dump: base:0x00d8306c size:4096, active:244
0x00d84068: 0x00000000
0x00d84064: 0x002f4358
0x00d84060-0x00d8405c: 0x00000000
0x00d84058-0x00d8403c: 0x12345678
0x00d84038: 0x00000000
0x00d84034: 0x00103725
0x00d84030: 0x00d8405c
0x00d8402c: 0x0000000a
0x00d84028-0x00d84014: 0x12345678
0x00d84010-0x00d84008: 0x00000000
0x00d84004: 0x00010297
0x00d84000: 0x00000008
0x00d83ffc: 0x002f454a
0x00d83ff8: 0x00000002 *
0x00d83ff4: 0x00000000
0x00d83ff0: 0x0000000a
0x00d83fec: 0x00abd800
0x00d83fe8: 0x00f87d1c
0x00d83fe4: 0x00d83ff8
0x00d83fe0: 0x00d84030
0x00d83fdc: 0x00f7ca34
0x00d83fd8: 0x00000003
0x00d83fd4: 0x0000000e
0x00d83fd0: 0x00104f21
0x00d83fcc: 0x00d84030
0x00d83fc8: 0x00010030
0x00d83fc4: 0x004d586e
0x00d83fc0: 0x00000000
0x00d83fbc: 0x00f7ca34
0x00d83fb8: 0x00f87d1c
0x00d83fb4: 0x00000246
0x00d83fb0: 0x00000002
0x00d83fac: 0x00000001
0x00d83fa8: 0x00abecdc
0x00d83fa4: 0x002ea837
0x00d83fa0: 0x00d83fd0
0x00d83f9c: 0x00000000
0x00d83f98: 0x03d872a2
0x00d83f94: 0x00000000
0x00d83f90: 0x03d96810
0x00d83f8c: 0x00000003
0x00d83f88: 0x00f7ca34
0x00d83f84: 0x00f87d1c
0x00d83f80: 0x00000005
0x00d83f7c: 0x00000000
0x00d83f78: 0x85b00000
Cisco PIX Firewall Version 6.3(4)
The flash device is in use by another task.
Compiled on Fri 02-Jul-04 00:07 by morlee
firewall up 17 hours 56 mins
Hardware: PIX-515, 64 MB RAM, CPU Pentium 200 MHz
Flash i28F640J5 @ 0x300, 16MB
BIOS Flash AT29C257 @ 0xfffd8000, 32KB
0: ethernet0: address is 0050.54ff.fb04, irq 10
1: ethernet1: address is 0050.54ff.fb05, irq 7
2: ethernet2: address is 00d0.b7af.cfdf, irq 9
Licensed Features:
Failover: Enabled
VPN-DES: Enabled
VPN-3DES-AES: Disabled
Maximum Physical Interfaces: 6
Maximum Interfaces: 10
Cut-through Proxy: Enabled
Guards: Enabled
URL-filtering: Enabled
Inside Hosts: Unlimited
Throughput: Unlimited
IKE peers: Unlimited
This PIX has an Unrestricted (UR) license.
Serial Number: 123456789 (0x11111111)
Running Activation Key: 0x11111111 0x11111111 0x11111111 0x11111111
Configuration has not been modified since last system restart.
------------------ show clock ------------------
12:10:37.712 UTC Wed Feb 23 2005
------------------ show memory ------------------
Free memory: 49760896 bytes
Used memory: 17347968 bytes
------------- ----------------
Total memory: 67108864 bytes
------------------ show conn count ------------------
150 in use, 246 most used
------------------ show xlate count ------------------
166 in use, 297 most used
------------------ show blocks ------------------
SIZE MAX LOW CNT
4 1600 1594 1600
80 400 398 400
256 1012 999 1012
1550 1317 900 932
------------------ show interface ------------------
interface ethernet0 "outside" is up, line protocol is up
Hardware is i82559 ethernet, address is 0050.54ff.fb04
IP address 195.7.249.2, subnet mask 255.255.255.224
MTU 1500 bytes, BW 100000 Kbit full duplex
1830455 packets input, 604951935 bytes, 0 no buffer
Received 6012 broadcasts, 0 runts, 0 giants
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort
1727977 packets output, 462995041 bytes, 0 underruns
0 output errors, 0 collisions, 0 interface resets
0 babbles, 0 late collisions, 0 deferred
0 lost carrier, 0 no carrier
input queue (curr/max blocks): hardware (128/128) software (0/18)
output queue (curr/max blocks): hardware (0/11) software (0/1)
interface ethernet1 "inside" is up, line protocol is up
Hardware is i82559 ethernet, address is 0050.54ff.fb05
IP address 10.153.10.1, subnet mask 255.255.255.0
MTU 1500 bytes, BW 100000 Kbit full duplex
3444218 packets input, 261419834 bytes, 0 no buffer
Received 16803 broadcasts, 0 runts, 0 giants
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort
5947065 packets output, 3674203089 bytes, 0 underruns
0 output errors, 0 collisions, 0 interface resets
0 babbles, 0 late collisions, 0 deferred
0 lost carrier, 0 no carrier
input queue (curr/max blocks): hardware (128/128) software (0/10)
output queue (curr/max blocks): hardware (0/17) software (0/1)
interface ethernet2 "dmz1" is up, line protocol is up
Hardware is i82559 ethernet, address is 00d0.b7af.cfdf
IP address 195.7.249.65, subnet mask 255.255.255.224
MTU 1500 bytes, BW 100000 Kbit full duplex
6700802 packets input, 3578769079 bytes, 0 no buffer
Received 1575 broadcasts, 0 runts, 0 giants
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort
4285089 packets output, 306685857 bytes, 0 underruns
0 output errors, 0 collisions, 0 interface resets
0 babbles, 0 late collisions, 0 deferred
0 lost carrier, 0 no carrier
input queue (curr/max blocks): hardware (128/128) software (0/9)
output queue (curr/max blocks): hardware (0/13) software (0/1)
------------------ show cpu usage ------------------
CPU utilization for 5 seconds = 1%; 1 minute: 1%; 5 minutes: 1%
------------------ show process ------------------
PC SP STATE Runtime SBASE Stack Process
Hsi 001ecf11 00950374 00565bd8 0 0094f3ec 3628/4096 arp_timer
Lsi 001f26c5 009f356c 00565bd8 0 009f25f4 3928/4096 FragDBGC
Lwe 00119aef 009ff714 00569340 0 009fe8ac 3688/4096 dbgtrace
Lwe 003f27e5 00a018a4 0055e510 3130 009ff95c 6832/8192 Logger
Hwe 003f6998 00a0499c 0055e7c0 0 00a02a24 8024/8192 tcp_fast
Hwe 003f6911 00a06a4c 0055e7c0 0 00a04ad4 8020/8192 tcp_slow
Lsi 0030d391 00b3d1cc 00565bd8 0 00b3c244 3916/4096 xlate clean
Lsi 0030d29f 00b3e26c 00565bd8 0 00b3d2f4 3884/4096 uxlate clean
Mwe 00304a63 00cd666c 00565bd8 0 00cd46d4 7908/8192
tcp_intercept_timer_process
Lsi 0044a055 00d82f44 00565bd8 0 00d81fbc 3900/4096 route_process
H* 002f45ac 0009ff2c 00565bc0 0 00d8306c 1976/4096 PIX Garbage
Collector
Hwe 0021a459 00d8e504 00565bd8 0 00d8a59c 16048/16384
isakmp_time_keeper
Lsi 002f214c 00da8594 00565bd8 0 00da760c 3944/4096 perfmon
Mwe 00211229 00dd29c4 00565bd8 0 00dd0a4c 7860/8192 IPsec timer
handler
Hwe 003a8933 00de7514 00588aa8 0 00de55cc 7048/8192
qos_metric_daemon
Mwe 00266705 00e0204c 00565bd8 0 00dfe0e4 15592/16384 IP Background
Lwe 003056da 00eb4d5c 0057c180 0 00eb3ee4 3704/4096 pix/trace
Lwe 00305912 00eb5e0c 0057c8b0 0 00eb4f94 3704/4096 pix/tconsole
Hwe 0011f247 00ec1ce4 00512c00 0 00ebe2fc 13692/16384 ci/console
Hwe 004434da 00ec3b14 005e2d90 10 00ec2bdc 3684/4096 lu_ctl
Csi 002fd61f 00ec4be4 00565bd8 0 00ec3c8c 3540/4096
update_cpu_usage
Hwe 002e8a81 00f7588c 00544f60 0 00f71a04 15884/16384 uauth_in
Hwe 003f53ed 00f7798c 008c7eb8 0 00f75ab4 7896/8192 uauth_thread
Hwe 0040c7fa 00f78adc 0055eb10 0 00f77b64 3960/4096 udp_timer
Hsi 001e4a0e 00f7a79c 00565bd8 0 00f79824 3928/4096 557mcfix
Crd 001e49c3 00f7b85c 00566050 41931280 00f7a8d4 3580/4096 557poll
Lsi 001e4a7d 00f7c8fc 00565bd8 0 00f7b984 3848/4096 557timer
Cwe 001e6619 00f929d4 0073def0 56670 00f90adc 6248/8192 pix/intf0
Mwe 0040c56a 00f93ae4 00911a28 0 00f92bac 3896/4096 riprx/0
Msi 003b1ee9 00f94bf4 00565bd8 0 00f93c7c 3888/4096 riptx/0
Cwe 001e6619 00f9adfc 007b3480 101560 00f98f04 6376/8192 pix/intf1
Mwe 0040c56a 00f9bf0c 009119e0 0 00f9afd4 3868/4096 riprx/1
Msi 003b1ee9 00f9d01c 00565bd8 0 00f9c0a4 3888/4096 riptx/1
Cwe 001e6619 00fa3224 00828a18 198640 00fa132c 6540/8192 pix/intf2
Mwe 0040c56a 00fa4334 00911998 0 00fa33fc 3896/4096 riprx/2
Msi 003b1ee9 00fa5444 00565bd8 0 00fa44cc 3888/4096 riptx/2
Hrd 00444321 00fa76a4 00565bc0 0 00fa672c 3928/4096 lu_xmit_timer
Hwe 00443005 00fa8744 005622c0 0 00fa77dc 3900/4096 lu_rx
Hwe 001b30f5 00fe3854 0056d858 0 00fe28ec 2844/4096 fover_thread
Hwe 0011f247 00fe45ac 00512c58 0 00fe3904 3204/4096 fover_rx
Hwe 001b5ea1 00fe5894 0056dedc 0 00fe491c 3960/4096 fover_tx
Hwe 001b3330 00fe78ac 0056dee8 0 00fe5934 8056/8192 fover_rep
Lwe 001b34ed 00fe88d4 0056def0 0 00fe794c 3976/4096 fover_lu_rep
Hwe 001b64d2 00fec8dc 0056def8 0 00fe8964 16212/16384 fover_parse
Hwe 003f5681 0105f21c 0089e640 0 0105ebd4 1196/2048 listen/telnet_1
Hwe 003f5681 0105facc 0089e738 0 0105f484 1196/2048 listen/telnet_2
Mwe 0037eb66 01062024 00565bd8 0 010600ac 7960/8192 Crypto CA
------------------ show failover ------------------
Failover Off
Cable status: My side not connected
Reconnect timeout 0:00:00
Poll frequency 15 seconds
------------------ show traffic ------------------
outside:
received (in 64579.750 secs):
1830455 packets 604951935 bytes
28 pkts/sec 9034 bytes/sec
transmitted (in 64579.750 secs):
1727977 packets 462995041 bytes
26 pkts/sec 7036 bytes/sec
inside:
received (in 64579.750 secs):
3444218 packets 261419834 bytes
53 pkts/sec 4048 bytes/sec
transmitted (in 64579.750 secs):
5947065 packets 3674203089 bytes
25 pkts/sec 56029 bytes/sec
dmz1:
received (in 64579.750 secs):
6700802 packets 3578769079 bytes
37 pkts/sec 55017 bytes/sec
transmitted (in 64579.750 secs):
4285089 packets 306685857 bytes
66 pkts/sec 4017 bytes/sec
------------------ show perfmon ------------------
PERFMON STATS: Current Average
Xlates 0/s 0/s
Connections 1/s 0/s
TCP Conns 0/s 0/s
UDP Conns 0/s 0/s
URL Access 0/s 0/s
URL Server Req 0/s 0/s
TCP Fixup 134/s 50/s
TCPIntercept 0/s 0/s
HTTP Fixup 2/s 4/s
FTP Fixup 2/s 0/s
AAA Authen 0/s 0/s
AAA Author 0/s 0/s
AAA Account 0/s 0/s
: End_Crash
More information about the cisco-nsp
mailing list