Discussion:
[j-nsp] problems with srx240
Maciej Jan Broniarz
2012-05-04 22:38:00 UTC
Permalink
Hi,

My SRX240 box started showing the following error in the logs:

May 5 00:36:08 srx240-lab srx240-lab Frame 00: sp = 0x49202a58, pc = 0x08020254
May 5 00:36:08 srx240-lab srx240-lab Frame 01: sp = 0x49202b00, pc = 0x0800c1fc
May 5 00:36:08 srx240-lab srx240-lab Frame 02: sp = 0x49202b70, pc = 0x0800d300
May 5 00:36:08 srx240-lab srx240-lab Frame 03: sp = 0x49202b90, pc = 0x082cb550
May 5 00:36:08 srx240-lab srx240-lab Frame 04: sp = 0x49202be8, pc = 0x080198c0
May 5 00:36:08 srx240-lab srx240-lab Frame 05: sp = 0x49202c10, pc = 0x080198c0
May 5 00:36:08 srx240-lab srx240-lab Frame 06: sp = 0x49202c38, pc = 0x080198c0
May 5 00:36:08 srx240-lab srx240-lab Frame 07: sp = 0x49202c60, pc = 0x08019a2c
May 5 00:36:08 srx240-lab srx240-lab Frame 08: sp = 0x49202c98, pc = 0x0801fc34
May 5 00:36:08 srx240-lab srx240-lab Frame 09: sp = 0x49202cc0, pc = 0x09dc54c8
May 5 00:36:18 srx240-lab srx240-lab SCHED: Thread 14 (Forwarding Thread) ran for 1572 ms without yielding
May 5 00:36:18 srx240-lab srx240-lab Scheduler Oinker
May 5 00:36:18 srx240-lab srx240-lab Frame 00: sp = 0x491b8c68, pc = 0x08020254
May 5 00:36:18 srx240-lab srx240-lab Frame 01: sp = 0x491b8d10, pc = 0x0800c1fc
May 5 00:36:18 srx240-lab srx240-lab Frame 02: sp = 0x491b8d80, pc = 0x088b3c8c
May 5 00:36:18 srx240-lab srx240-lab Frame 03: sp = 0x491b8dd0, pc = 0x088b76d0
May 5 00:36:18 srx240-lab srx240-lab Frame 04: sp = 0x491b8e50, pc = 0x0801fc34
May 5 00:36:18 srx240-lab srx240-lab Frame 05: sp = 0x491b8e78, pc = 0x09dc54c8

The box isn't heavy loaded - just about 1-2megs of trafiic per sec.

What might be the problem here?

All best,
mjb
Aaron Dewell
2012-05-05 00:21:06 UTC
Permalink
I have observed this on both an srx240 and srx210h. Jtac advised turning
off utm and idp (on 210), yet those were enabled before with no issues. The
240 was fresh out of the box getting initial config (IP, Nat, zones,
policies, I.e. nothing amazing).

I'll be waiting to see the answers too!
Post by Maciej Jan Broniarz
Hi,
May 5 00:36:08 srx240-lab srx240-lab Frame 00: sp = 0x49202a58, pc = 0x08020254
May 5 00:36:08 srx240-lab srx240-lab Frame 01: sp = 0x49202b00, pc = 0x0800c1fc
May 5 00:36:08 srx240-lab srx240-lab Frame 02: sp = 0x49202b70, pc = 0x0800d300
May 5 00:36:08 srx240-lab srx240-lab Frame 03: sp = 0x49202b90, pc = 0x082cb550
May 5 00:36:08 srx240-lab srx240-lab Frame 04: sp = 0x49202be8, pc = 0x080198c0
May 5 00:36:08 srx240-lab srx240-lab Frame 05: sp = 0x49202c10, pc = 0x080198c0
May 5 00:36:08 srx240-lab srx240-lab Frame 06: sp = 0x49202c38, pc = 0x080198c0
May 5 00:36:08 srx240-lab srx240-lab Frame 07: sp = 0x49202c60, pc = 0x08019a2c
May 5 00:36:08 srx240-lab srx240-lab Frame 08: sp = 0x49202c98, pc = 0x0801fc34
May 5 00:36:08 srx240-lab srx240-lab Frame 09: sp = 0x49202cc0, pc = 0x09dc54c8
May 5 00:36:18 srx240-lab srx240-lab SCHED: Thread 14 (Forwarding
Thread) ran for 1572 ms without yielding
May 5 00:36:18 srx240-lab srx240-lab Scheduler Oinker
May 5 00:36:18 srx240-lab srx240-lab Frame 00: sp = 0x491b8c68, pc = 0x08020254
May 5 00:36:18 srx240-lab srx240-lab Frame 01: sp = 0x491b8d10, pc = 0x0800c1fc
May 5 00:36:18 srx240-lab srx240-lab Frame 02: sp = 0x491b8d80, pc = 0x088b3c8c
May 5 00:36:18 srx240-lab srx240-lab Frame 03: sp = 0x491b8dd0, pc = 0x088b76d0
May 5 00:36:18 srx240-lab srx240-lab Frame 04: sp = 0x491b8e50, pc = 0x0801fc34
May 5 00:36:18 srx240-lab srx240-lab Frame 05: sp = 0x491b8e78, pc = 0x09dc54c8
The box isn't heavy loaded - just about 1-2megs of trafiic per sec.
What might be the problem here?
All best,
mjb
_______________________________________________
juniper-nsp mailing list juniper-nsp at puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp
Tim Eberhard
2012-05-05 01:12:43 UTC
Permalink
If I recall correctly, I looked into this previously and found that
this was due to idp being enabled (which it is by default) but not
being used by policy. I want to say the fix to stop these
non-impacting albeit annoying log messages is to just disable IDP all
together.

Hope that helps,
-Tim Eberhard
Hi,
May ?5 00:36:08 ?srx240-lab srx240-lab Frame 00: sp = 0x49202a58, pc = 0x08020254
May ?5 00:36:08 ?srx240-lab srx240-lab Frame 01: sp = 0x49202b00, pc = 0x0800c1fc
May ?5 00:36:08 ?srx240-lab srx240-lab Frame 02: sp = 0x49202b70, pc = 0x0800d300
May ?5 00:36:08 ?srx240-lab srx240-lab Frame 03: sp = 0x49202b90, pc = 0x082cb550
May ?5 00:36:08 ?srx240-lab srx240-lab Frame 04: sp = 0x49202be8, pc = 0x080198c0
May ?5 00:36:08 ?srx240-lab srx240-lab Frame 05: sp = 0x49202c10, pc = 0x080198c0
May ?5 00:36:08 ?srx240-lab srx240-lab Frame 06: sp = 0x49202c38, pc = 0x080198c0
May ?5 00:36:08 ?srx240-lab srx240-lab Frame 07: sp = 0x49202c60, pc = 0x08019a2c
May ?5 00:36:08 ?srx240-lab srx240-lab Frame 08: sp = 0x49202c98, pc = 0x0801fc34
May ?5 00:36:08 ?srx240-lab srx240-lab Frame 09: sp = 0x49202cc0, pc = 0x09dc54c8
May ?5 00:36:18 ?srx240-lab srx240-lab SCHED: Thread 14 (Forwarding Thread) ran for 1572 ms without yielding
May ?5 00:36:18 ?srx240-lab srx240-lab Scheduler Oinker
May ?5 00:36:18 ?srx240-lab srx240-lab Frame 00: sp = 0x491b8c68, pc = 0x08020254
May ?5 00:36:18 ?srx240-lab srx240-lab Frame 01: sp = 0x491b8d10, pc = 0x0800c1fc
May ?5 00:36:18 ?srx240-lab srx240-lab Frame 02: sp = 0x491b8d80, pc = 0x088b3c8c
May ?5 00:36:18 ?srx240-lab srx240-lab Frame 03: sp = 0x491b8dd0, pc = 0x088b76d0
May ?5 00:36:18 ?srx240-lab srx240-lab Frame 04: sp = 0x491b8e50, pc = 0x0801fc34
May ?5 00:36:18 ?srx240-lab srx240-lab Frame 05: sp = 0x491b8e78, pc = 0x09dc54c8
The box isn't heavy loaded - just about 1-2megs of trafiic per sec.
What might be the problem here?
All best,
mjb
_______________________________________________
juniper-nsp mailing list juniper-nsp at puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp
David Klein
2012-05-05 12:51:28 UTC
Permalink
How do you disable IDP and UTM?

Thanks...

-David Klein

-----Original Message-----
From: juniper-nsp-bounces at puck.nether.net
[mailto:juniper-nsp-bounces at puck.nether.net] On Behalf Of Tim Eberhard
Sent: Friday, May 04, 2012 9:13 PM
To: Maciej Jan Broniarz
Cc: juniper-nsp at puck.nether.net
Subject: Re: [j-nsp] problems with srx240

If I recall correctly, I looked into this previously and found that this was
due to idp being enabled (which it is by default) but not being used by
policy. I want to say the fix to stop these non-impacting albeit annoying
log messages is to just disable IDP all together.

Hope that helps,
-Tim Eberhard

On Fri, May 4, 2012 at 5:38 PM, Maciej Jan Broniarz <gausus at gausus.net>
Hi,
May ?5 00:36:08 ?srx240-lab srx240-lab Frame 00: sp = 0x49202a58, pc =
0x08020254 May ?5 00:36:08 ?srx240-lab srx240-lab Frame 01: sp =
0x49202b00, pc = 0x0800c1fc May ?5 00:36:08 ?srx240-lab srx240-lab
Frame 02: sp = 0x49202b70, pc = 0x0800d300 May ?5 00:36:08 ?srx240-lab
srx240-lab Frame 03: sp = 0x49202b90, pc = 0x082cb550 May ?5 00:36:08 ?
srx240-lab srx240-lab Frame 04: sp = 0x49202be8, pc = 0x080198c0 May ?
5 00:36:08 ?srx240-lab srx240-lab Frame 05: sp = 0x49202c10, pc =
0x080198c0 May ?5 00:36:08 ?srx240-lab srx240-lab Frame 06: sp =
0x49202c38, pc = 0x080198c0 May ?5 00:36:08 ?srx240-lab srx240-lab
Frame 07: sp = 0x49202c60, pc = 0x08019a2c May ?5 00:36:08 ?srx240-lab
srx240-lab Frame 08: sp = 0x49202c98, pc = 0x0801fc34 May ?5 00:36:08 ?
srx240-lab srx240-lab Frame 09: sp = 0x49202cc0, pc = 0x09dc54c8 May ?
5 00:36:18 ?srx240-lab srx240-lab SCHED: Thread 14 (Forwarding Thread)
ran for 1572 ms without yielding May ?5 00:36:18 ?srx240-lab
srx240-lab Scheduler Oinker May ?5 00:36:18 ?srx240-lab srx240-lab
Frame 00: sp = 0x491b8c68, pc = 0x08020254 May ?5 00:36:18 ?srx240-lab
srx240-lab Frame 01: sp = 0x491b8d10, pc = 0x0800c1fc May ?5 00:36:18 ?
srx240-lab srx240-lab Frame 02: sp = 0x491b8d80, pc = 0x088b3c8c May ?
5 00:36:18 ?srx240-lab srx240-lab Frame 03: sp = 0x491b8dd0, pc =
0x088b76d0 May ?5 00:36:18 ?srx240-lab srx240-lab Frame 04: sp =
0x491b8e50, pc = 0x0801fc34 May ?5 00:36:18 ?srx240-lab srx240-lab
Frame 05: sp = 0x491b8e78, pc = 0x09dc54c8
The box isn't heavy loaded - just about 1-2megs of trafiic per sec.
What might be the problem here?
All best,
mjb
_______________________________________________
juniper-nsp mailing list juniper-nsp at puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp
_______________________________________________
juniper-nsp mailing list juniper-nsp at puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp
Tim Eberhard
2012-05-05 14:18:36 UTC
Permalink
Gotta love those proteus guys. Doing a write up on this so I don't have to :)


http://www.proteus.net/sites/default/files/how_to_disable_idp_in_an_srx_0.pdf

I'm pretty sure you need to either kill the process or bounce the box
for it to "officially" take effect as the memory is allocated/consumed
upon start up.

Hope this helps,
-Tim Eberhard
Post by David Klein
How do you disable IDP and UTM?
Thanks...
-David Klein
-----Original Message-----
From: juniper-nsp-bounces at puck.nether.net
[mailto:juniper-nsp-bounces at puck.nether.net] On Behalf Of Tim Eberhard
Sent: Friday, May 04, 2012 9:13 PM
To: Maciej Jan Broniarz
Cc: juniper-nsp at puck.nether.net
Subject: Re: [j-nsp] problems with srx240
If I recall correctly, I looked into this previously and found that this was
due to idp being enabled (which it is by default) but not being used by
policy. I want to say the fix to stop these non-impacting albeit annoying
log messages is to just disable IDP all together.
Hope that helps,
-Tim Eberhard
Hi,
May ?5 00:36:08 ?srx240-lab srx240-lab Frame 00: sp = 0x49202a58, pc =
0x08020254 May ?5 00:36:08 ?srx240-lab srx240-lab Frame 01: sp =
0x49202b00, pc = 0x0800c1fc May ?5 00:36:08 ?srx240-lab srx240-lab
Frame 02: sp = 0x49202b70, pc = 0x0800d300 May ?5 00:36:08 ?srx240-lab
srx240-lab Frame 03: sp = 0x49202b90, pc = 0x082cb550 May ?5 00:36:08
srx240-lab srx240-lab Frame 04: sp = 0x49202be8, pc = 0x080198c0 May
5 00:36:08 ?srx240-lab srx240-lab Frame 05: sp = 0x49202c10, pc =
0x080198c0 May ?5 00:36:08 ?srx240-lab srx240-lab Frame 06: sp =
0x49202c38, pc = 0x080198c0 May ?5 00:36:08 ?srx240-lab srx240-lab
Frame 07: sp = 0x49202c60, pc = 0x08019a2c May ?5 00:36:08 ?srx240-lab
srx240-lab Frame 08: sp = 0x49202c98, pc = 0x0801fc34 May ?5 00:36:08
srx240-lab srx240-lab Frame 09: sp = 0x49202cc0, pc = 0x09dc54c8 May
5 00:36:18 ?srx240-lab srx240-lab SCHED: Thread 14 (Forwarding Thread)
ran for 1572 ms without yielding May ?5 00:36:18 ?srx240-lab
srx240-lab Scheduler Oinker May ?5 00:36:18 ?srx240-lab srx240-lab
Frame 00: sp = 0x491b8c68, pc = 0x08020254 May ?5 00:36:18 ?srx240-lab
srx240-lab Frame 01: sp = 0x491b8d10, pc = 0x0800c1fc May ?5 00:36:18
srx240-lab srx240-lab Frame 02: sp = 0x491b8d80, pc = 0x088b3c8c May
5 00:36:18 ?srx240-lab srx240-lab Frame 03: sp = 0x491b8dd0, pc =
0x088b76d0 May ?5 00:36:18 ?srx240-lab srx240-lab Frame 04: sp =
0x491b8e50, pc = 0x0801fc34 May ?5 00:36:18 ?srx240-lab srx240-lab
Frame 05: sp = 0x491b8e78, pc = 0x09dc54c8
The box isn't heavy loaded - just about 1-2megs of trafiic per sec.
What might be the problem here?
All best,
mjb
_______________________________________________
juniper-nsp mailing list juniper-nsp at puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp
_______________________________________________
juniper-nsp mailing list juniper-nsp at puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp
pkc_mls
2012-05-10 06:31:06 UTC
Permalink
Post by Maciej Jan Broniarz
Hi,
May 5 00:36:08 srx240-lab srx240-lab Frame 00: sp = 0x49202a58, pc = 0x08020254
May 5 00:36:08 srx240-lab srx240-lab Frame 01: sp = 0x49202b00, pc = 0x0800c1fc
May 5 00:36:08 srx240-lab srx240-lab Frame 02: sp = 0x49202b70, pc = 0x0800d300
The box isn't heavy loaded - just about 1-2megs of trafiic per sec.
What might be the problem here?
Hi,
Can you please indicate which file shows the error message ?
When did the message appear for the first time ?
Which version are you running on the srx ?

Loading...