EEM syslog filters

Is there a tcl script or EEM configuration where I can filter syslog messages from my switch to syslog server. My syslog server is filling with the 802.1x logs and I want to filter these if possile. I have Cisco 4507s with SUP6 and SUP7 using 151-1.
Dec 17 08:48:31.027: %AUTHMGR-5-SUCCESS: Authorization succeeded for client (xxxx.xxxx.xxxx) on Interface Gi1/21 AuditSessionID 0A04CD080000CD54FAFE6110
Dec 17 08:48:57.672: %DOT1X-5-SUCCESS: Authentication successful for client (yyyy.yyyy.yyyy) on Interface Gi2/13 AuditSessionID 0A04CD080000BCA3CA77D79F
Dec 17 08:48:57.672: %AUTHMGR-7-RESULT: Authentication result 'success' from 'dot1x' for client (xxxx.xxxx.xxxx) on Interface Gi2/13 AuditSessionID 0A04CD080000BCA3CA77D79F
Dec 17 08:48:58.676: %AUTHMGR-5-SUCCESS: Authorization succeeded for client (xxxx.xxxx.xxxx) on Interface Gi2/13 AuditSessionID 0A04CD080000BCA3CA77D79F

I'm not sure if logging discriminators are supported in your version of code, but that would be the easiest way to do this:
logging discriminator nodot1x severity drops 5,7 facility drops AUTHMGR mnemonics drops SUCCESS|RESULT
logging host 10.10.10.10 discriminator nodot1x

Similar Messages

EEM Syslog Pattern Capture

Hello Community,
Can someone please let me know if its possible to have a EEM script activated when particular word appears in a syslog.
For the following is a syslog message:
Sep 19 09:11:33.966: %HA_EM-2-LOG: utilisationHighInterfaceUtilization.tcl: 992&You are experiencing abnormally high traffic utilization |ifu|/15
Would it be possible if have a EEM script activated when the word "high traffic utilization" from the above syslog message appears?
I have tried with the following but it won't work.
event manager applet toptalkers
event syslog pattern "high traffic utilization"
action 1.0 cli command "enable"
action 1.5 cli command "show flow monitor FlowMonitor1 cache aggregate ipv4 protocol"
action 4.0 mail server "10.44.xxx.xxx" to "[email protected]" from "[email protected]" subject "toptalkers." body "TopTalker Script $_cli_result"
Cheers
Carlton
BTW, I will respond to the other questions I have posted on this forum.

Hello Community,
I figured out why it doesn't work.
Its because the event isn't, technically speaking, a syslog event. Therefore, can someone please show me how to make the script work with the event as stated above:
Sep 19 09:11:33.966: %HA_EM-2-LOG: utilisationHighInterfaceUtilization.tcl: 992&You are experiencing abnormally high traffic utilization |ifu|/15
Cheers
Carlton

EEM syslog issue

I have an issue with the syslog output of my eem script. The syslog command below does work. It sends an individual syslog message to my mgmt station for EACH line of cli output. I confirmed this with wireshark. The "show log" output looks fine (see below). I would like to get all the cli output or at least most of it in ONE large syslog message Anyone know how to fix this?
<script>
event manager applet SH_IP_NAT_STATS
event timer cron name nat_stats cron-entry "0-59/5 * * * *"
action 1.1 cli command "sh ip nat statistics"
action 1.2 syslog msg "cli: $_cli_result"
Log Buffer (52000 bytes):
000080: *Nov 15 04:30:00.052: %HA_EM-6-LOG: SH_IP_NAT_STATS: cli:
Total active translations: 38 (1 static, 37 dynamic; 38 extended)
Peak translations: 135, occurred 00:25:23 ago
Outside interfaces:
FastEthernet0/0, FastEthernet0/1
Inside interfaces:
Vlan10
Hits: 6270 Misses: 0
CEF Translated packets: 1078, CEF Punted packets: 5192
Expired translations: 622
Dynamic mappings:
-- Inside Source
[Id: 1] route-map nonat interface FastEthernet0/1 refcount 37
Appl doors: 5
Normal doors: 0
Queued Packets: 0

Ah, I misunderstood. There are a number of ways you could do this. One thing that might be easiest is to configure two applets:
event manager applet MARVEL
event syslog pattern "%MWR2900MRVL_FLTMG-5-EVENT_WARNING"
action 1.0 cli command "enable"
action 2.0 syslog msg "MWR2900MRVL: Marvell Chip Bug detected"
action 3.0 cli command "clear mac-address-table secure"
action 4.0 cli command "config t"
action 5.0 cli command "event manager applet MARVEL"
action 6.0 cli command "event none"
action 7.0 cli command "exit"
action 8.0 cli command "event manager applet MARVEL-countdown"
action 9.0 cli command "event timer countdown time 3600"
action 9.1 cli command "end"
event manager applet MARVEL-countdown
event none
action 1.0 cli command "enable"
action 2.0 cli command "config t"
action 3.0 cli command "event manager applet MARVEL-countdown"
action 4.0 cli command "event none"
action 5.0 cli command "event manager applet MARVEL"
action 6.0 cli command "event syslog pattern %MWR2900MRVL_FLTMG-5-EVENT_WARNING"
action 7.0 cli command "end"

How to create a CPN ticket from a custom (EEM) syslog message?

Using EEM created a syslog message and want to create a ticket in Cisco Prime Network.

hi tush,
when u have content adm role
you can create the folder in that folder u can create no of folder......
u can see the nice video from nichollas
http://www.youtube.com/watch?v=FEckQXyccw8
let me know u need any further information
ravindra

Using EEM to automatically put APs onto correct VLAN?

Hi,
I am stuck in the unfortunate situation of read-only access to my own network until I pass my CCNA.... however, in the interim I've been researching some topics.
One of the things I came across was using EEM to fire off tclsh progams when events occur on a switch/router, or even using syslog filtering to fire off events based on certain patterns.
It occurred to me that, using these methods, you could get devices to autoconfigure themselves. For instance, I have a WiSM on site (which yet again I have little control over ...) and although I have very little idea of how the WiSM actually works, fundamentally the problem is that when a new AP is plugged in, it needs placed into a certain VLAN and can then offer wireless access into the network.
Of course, a Cisco WLAN AP is a CDP aware device and this got me thinking ... if you can either fire off an event using EEM on CDP adjacency changes, or alternatively enable 'debug cdp adjacency' and filter the syslog ... you could take the CDP device's name, capabilities (Trans-Bridge for an AP), and MAC address. Then the Tcl script could, after checking the name and MAC address against a list of known APs, automatically place the AP onto the appropriate vlan (a running-config change).
Similarly, an event or syslog trap could return the port back to the access VLAN when the AP is disconnected.
This would enable autoconfiguration of APs as and when they are plugged in.
Before I reinvent the wheel, has anyone: a) tried this; b) succeeded?
Thanks,
M.

Hmm, that looks very much like what I want.
No doubt it is very expensive. And tclsh is free...
Still, looks like my idea is workable - since I'm guessing that SmartPorts is using the same techniques ...
So, has anyone ever done it for free without paying a lot for SmartPorts?

Disable EEM console logging?

I currently have EEM running some applets, and they're working, but I cannot figure out how to suppress the messages popping up in the console. I send the output from a cli command to syslog using a watchdog timer.
I can do a "no logging console informational", but that shows up in the config as "no logging console"
event manager applet syslog
event timer watchdog time 180
action 1.0 cli command "show ip interface brief"
action 2.0 syslog priority informational msg "$_cli_result"
Is there a way to hide only the eem syslog traffic from the console?

No, you cannot do this other than lowering the logging level on the console. For example:
logging console 4

Cisco PI syslog server configuration

Hi all,
I need to configure the PI as syslog server and get the log file from the PI to read it ??
how can I do it, please advice
thanks in advance

Hi,
Which prime version are you using ?
Here is what Prime 2.1 user guide says
http://www.cisco.com/c/en/us/td/docs/net_mgmt/prime/infrastructure/2-1/user/guide/pi_ug/alarms.html#pgfId-1054572
Prime Infrastructure logs all emergency, alert, and critical messages generated by all devices that are managed by Prime Infrastructure.
Prime Infrastructure also logs all SNMP messages and syslogs it receives. To view syslogs, choose Operate > Alarms & Events , then click the Syslogs tab.
Syslog Predefined Filters
Prime Infrastructure uses the following syslog filters:
Severity 0 and 1
Severity 2
Environmental Monitor
Memory Allocation Failure
Catalyst Integrated Security Features
Cisco IOS Firewall Denial of Service
Read this thread as well, it talks about tweak this setting, but it could leads to fill up your prime disk space quickly.
https://supportforums.cisco.com/discussion/11645481/prime-infrastructure-12-syslog
HTH
Rasika
**** Pls rate all useful responses ****

Syslog alerts and levels setting

Hi All,
I have 20 PIX and ASA firewall have been configured in my ciscoworks (lms 2.6)
I am able to get alerts like device down and authentication failure messages through mail, I guess these are from DFM.
My present concerns....
Configure syslogs in firewalls as per level 1-7 (ignore 7-5 in Ciscoworks) is that possible? If I configure syslog level as 1 then it is sending all syslogs from 1-7 which i dont want.
And I need to get syslog alerts from firewals to my ciscoworks and then from ciscoworks to my mailbox through email.
Can someone help me on this.
Thanks in advance.
Regards,
Jopeti.

You can use automated actions and syslog filters to achieve this based on the message type.
Resource Manager Essentials > Tools > Syslog > Automated Actions
http://www.cisco.com/en/US/partner/docs/net_mgmt/ciscoworks_resource_manager_essentials/4.0/user/guide/syslog.html#wp1211314
RME > Tools > Syslog > Message Filter
http://www.cisco.com/en/US/partner/docs/net_mgmt/ciscoworks_resource_manager_essentials/4.0/user/guide/syslog.html#wp1150419

LMS 2.6 / RME : automated action for syslog

HI,
Is it possible to find a configure file or properties file for automate action which can be editable.
I lost automated action configuration and I would like to configure as before.
Many thanks, Elisabeth

I'd think AA lost in the GUI would be erased from the flat file (such as filters.dat for syslog filters) as well, in which case the only way to restore it would be from an older LMS backup.

Cwjava.exe uses 100% utilization in LMS 3.1

We have observed that cwjava.exe process nearle utilizing 80% - 90% cpu utilization in LMS 3.1
It makes that LMS server responding slow.
Please tell how to overcome this problem.

On which platform is LMS running?
what size does the syslog file has?
If you have Firewalls sending logs to LMS, this could bring heavy load on the server.
Another issue could be the name resolution mechanism for syslog messages and a slow or even failing DNS for these requests.
In LMS 2.6 - LMS 3.0.1 this could be enabled/disabled in
Common Services > Server > Admin > System Preferences
But it seems that they removed this config point in LMS 3.1 - at least I cannot find it...
These log files could shed some light on this:
AnalyzerDebug.log
SyslogCollector.log
Also the defined syslog filters could have an impact and slow down the process.
As a last resort, you also can try to just restart SyslogAnalyzer and SyslogCollector process and see if the problem goes away. You should do this in a one-liner to avoid a manual resubscription of the SyslogCollector
# stopping the processes:
pdterm SyslogCollector SyslogAnalyzer
# control their state:
pdshow SyslogCollector SyslogAnalyzer
# starting the processes:
pdexec SyslogCollector SyslogAnalyzer

Failed BEXANALYZER gateway errors stay in DISCONNECT state

When I check SMGW I can see gateway errors for BEXANALYZER. Normally the parameter gw/conn_disconnect would cleanup these sessions (session w/ state of DISCONNECT). But this parm does not cleanup registered server programs.
Any ideas how these can be removed?
AL08 will show "old" users - in this case failed RFC's so it is misleading.
Thank you.

Hello Agus
The error message indicates that the dispatcher process was not able to
deliver a NOWP message to a user context that does no longer exists.
This happens if a batch process issues an asynchronous RFC that shall
send a response when it finishes. However, the batch job does not wait
to collect the answer.
When the dispatcher tries to pass the result of the aRFC to the batch
process, it realizes that the context that issued the RFC no longer
exists and prints out the message.
YOu can safely ignore the message.
And for more information, Please refer to the notes:
27617     Syslog Q0G, scratch area too small
191234    Syslog: Q0G K request (type NOWP) cannot be ...
681085 Scratch area is too small, opcode 6
62239   Termination when maintaining syslog filters
This information should help a lot.
Regards,
Paul

Logging VPN connection information

I want to log to my syslog server the IP that a VPN client receives from the locally configured pool on my ASA for both IPSec and SSL VPN connections. Does anyone know the logging configuration I need to capture this information?

If you load your ASA ASDM look at realtime log.. have a user vpn in and watch the log you will see IDs and its severity category..
6Sep 25 2009 12:43:24 713228 Group = ciscovpn_ra_access, Username = XXX, IP = xxx.xxx.xxx.xx, Assigned private IP address 10.20.20.20 to remote user
That particular syslog message is ID :713228 , under severity 6 - informational.
for confirming the syslog ID go to syslog IDs link and look at the ID number .
http://www.cisco.com/en/US/docs/security/asa/asa82/system/message/logmsgs.html#wp5391006
for SSL VPN do the procedure above ..
for logging particualr IDs to syslog server use syslog filters.
http://www.cisco.com/en/US/docs/security/asa/asa82/configuration/guide/monitor_syslog.html#wp1097397

ASUS RT-N56u vs Asus RT-N66U N900

I am so confused as what to buy not really understanding Routers I would like to buy 1 of these ASUS RT-N56u or Asus RT-N66U N900......
I would love to know if I would benefit with my BT Infinity much between these 2 Routers.
At the moment I am with o2 upto 20meg and get 15meg wired and wireless.
Any help would be fantastic.
The ASUS RT-N56u being the cheaper AMAZON £86.39
ASUS RT-N56u
Specifications
LAN Ports   WAN x 1, LAN x 4 RJ-45 for 10/100/1000 Base T
Supports Ethernet and 802.3 with max bit rate 10/100/1000Mbps and auto cross-over function (MDI-X)
Antenna   2 x internal antenna for 2.4GHz application with 3.8dBi gain
3 x internal antenna for 5GHz application with 5.1dBi gain
Memory   8 MB flash and 128 MB RAM
USB port   USB2.0 x 2
Power Adapter   AC input: 100V-240V (50-60HZ)
DC output: 19V/1.58A
Size   172 x 145 x 60 mm (6.77” x 5.7” x 2.36”)
Weight   330g (0.73lb)
Operating Frequency   Simultaneous 2.4GHz and 5GHz
Data Rate   802.11n: up to 300Mbps
802.11a/g: up to 54Mbps
802.11b: up to 11Mbps
Encryption   Supports 64/128-bit WEP
WPA-PSK, WPA2-PSK
WPA-Enterprise, WPA2-Enterprise
WPS (Wi-Fi Protected Setup)
Management   Quality of Service and traffic monitor
DHCP server (up to 253 IP addresses)
Web-based administration
Firmware upgrade
Save/restore configuration file
Network Protocol   Automatic IP, static IP, PPPoE (MPPE supported), PPTP, L2TP
Security   Firewall: NAT and SPI (Stateful Packet Inspection), intrusion detection including logging
Logging: dropped packet, security event, syslog
Filtering: port, IP packet, URL keyword, MAC address
The RT-N66U N900 from BT £144.97
Asus RT-N66U N900
Specifications
Network Standard   IEEE 802.11a, IEEE 802.11b, IEEE 802.11g, IEEE 802.11n, IPv4, IPv6
Data Rate   802.11a : 6,9,12,18,24,36,48,54Mbps
802.11b : 1, 2, 5.5, 11Mbps
802.11g : 6,9,12,18,24,36,48,54Mbps
802.11n : up to 450Mbps
Antenna   Detachable antenna x 3
Operating Frequency   2.4G~2.4835GHz /5.1~5.8GHz
Encryption   64-bit WEP, 128-bit WEP, WPA2-PSK, WPA-PSK, WPA-Enterprise, WPA2-Enterprise, WPS support
Firewall & Access Control   Firewall: SPI intrusion detection,DoS protection
Access control: Parental control, Network service filter, URL filter, Port filter
Management   UPnP, DLNA, DNS Proxy, DHCP, NTP Client, DDNS, Port Triger, Virtual Server, DMZ
VPN Support   IPSec Pass-Throuth
PPTP Pass-Through
L2TP Pass-Through
WAN Connection Type   Internet connection type : Automatic IP, Static IP, PPPoE(MPPE supported), PPTP, L2TP
Dual Link support
Multicast Proxy support
Utilities   ．Download master
- support BT, NZB, HTTP, ED2K
- support encryption, DHT, PEX and magnet link
- upload and download bandwidth control
- download scheduling
．Media server:
Image: JPEG
Audio: mp3, wma, wav, pcm, mp4, lpcm, ogg
Video: asf, avi, divx, mpeg, mpg, ts, vob, wmv, mkv, mov
．QoS:
WMM
User definable rules for IP/MAC/Port. Upload and Download bandwidth management.
ACK/SYN/FIN/RST/ICMP with Highest priority
．Guest Network
2.4GHz guest network x 3, 5GHz guest network x 3
．Printer Server: multifunctional printer support(Windows nly), LPR protocol support
．File server: Samba and FTP server with account management
．PPTP VPN server
．Network map
．Traffic monitor
Ports   4 x RJ45 for 10/100/1000/Gigabits BaseT for LAN, 1 x RJ45 for 10/100/1000/Gigabits BaseT for WAN, Support Ethernet and 802.3 with max. bit rate 10/100/1000/Gigabits Mbps and auto cross-over function(MDI-X)
USB 2.0 x 2
Button   WPS Button, Reset Button, Power Button
LED Indicator   LAN x 4
WAN x 1
AIR x 2
USB x 1
Power Supply   AC Input : 110V~240V(50~60Hz)
DC Output : 19 V with max. 1.58 A current
Dimensions   207 x 148.8 x 35.5 mm (WxDxH)
Weight   450 g
Package Content   RT-N66U wireless router
Stand
RJ-45 cable
Power adapter
Warranty card
Quick start guide
Thankyou
Gary.

yeah i agree with Infintechris ( great name ) its whether you need the extra features.My view is once the B.T Engineer has installed it and you have run it for a few weeks if your wireless connection is working and you don,t need extra stuff just leave it alone I,ve had p.c systems and fiddled with updates and ended up in a worse mess so i tend to leave well alone if when i switch it on it works ha!
JamJar62

EEM Applet Problem With: event syslog pattern ".*" priority 2

I went to create a EEM applet that would be invoked whenever any syslog message of priority 0-2 was invoked. I figured the following event statement would work
event syslog pattern ".*" priority 2
I never really used the priority optional argument before but thought I understood from the docs that messages at or numerically lower than the specified level are matched.
Well it doesn't seem to work as documented. Seems to me that only messages at the specified level are beng matched and not messages numerically lower than the specified level.
Anyway I did what I wanted differently but wanted to post this in case this is a bug in the syslog ed.

Actually, it's a problem with the documentation. The priority option only matches the specified severity. What you could do is adjust pattern to do this:
event syslog pattern "*-[012]-"

EEM policy: Syslog ED & logging Discriminator = Crash

Hi everyone!
I found a new bug in cisco IOS 15.1(4)M3 when running EEM script with syslog event detector.
If system logging performed using the "logging discriminator" and run concurrently EEM script with syslog event detector, then Cisco router crash and goes to reboot.
Cisco ISR G2 3925E.

Hi Joseph!
SHOW VERSION
=============
i3925E-0-(offline)#sho ver
Cisco IOS Software, C3900e Software (C3900e-UNIVERSALK9_NPE-M), Version 15.1(4)M3, RELEASE SOFTWARE (fc1)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2011 by Cisco Systems, Inc.
Compiled Tue 06-Dec-11 20:22 by prod_rel_team
ass
ROM: System Bootstrap, Version 15.1(1r)T4, RELEASE SOFTWARE (fc1)
i3925E-0-(offline) uptime is 20 hours, 31 minutes
System returned to ROM by bus error at PC 0x14F40AF, address 0x14F40AF at 14:50:19 MSK Thu Mar 15 2012
System restarted at 14:52:14 MSK Thu Mar 15 2012
System image file is "flash0:c3900e-universalk9_npe-mz.SPA.151-4.M3.bin"
Last reload type: Normal Reload
This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.
A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html
If you require further assistance please contact us by sending email to
[email protected].
Cisco CISCO3925-CHASSIS (revision 1.0) with C3900-SPE200/K9 with 1015808K bytes of memory.
Processor board ID FCZ153920YC
4 Gigabit Ethernet interfaces
DRAM configuration is 72 bits wide with parity enabled.
256K bytes of non-volatile configuration memory.
255744K bytes of ATA System CompactFlash 0 (Read/Write)
License Info:
License UDI:
Device#   PID                   SN
*0        C3900-SPE200/K9       FOC15357xxx
Technology Package License Information for Module:'c3900e'
Technology    Technology-package           Technology-package
              Current       Type           Next reboot
ipbase        ipbasek9      Permanent      ipbasek9
security      securityk9_npePermanent      securityk9_npe
uc            None          None           None
data          None          None           None
Configuration register is 0x2102
SHOW STACK & REGION
====================
i3925E-0-(offline)#show region
Region Manager:
      Start         End     Size(b) Class Media Name
0x00000000 0x000FFFFF     1048576 IText R/W    bios
0x00100000 0x3E0FFFFF 1040187392 Local R/W    main
0x0010176C 0x04FE31DF    82713204 IText R/O    main:text
0x04FE3200 0x096E892F    74471216 IData R/W    main:data
0x096E8930 0x0A2FB1DF    12658864 IBss   R/W    main:bss
0x0A2FB1E0 0x1BFFB1DF   298844160 Iomem R/W    main:iomem
0x1BFFB1E0 0x3BFFFFFF   536890912 Local R/W    main:main
0x1BFFB1E0 0x3BFFFFFF   536890912 Local R/W    main:heap
Free Region Manager:
      Start         End     Size(b) Class Media Name
i3925E-0-(offline)#sho stack
Minimum process stacks:
Free/Size   Name
22876/24000 MRIB IPv6 Init Process
23044/24000 MRIB IPv4 Init Process
10080/12000 EEM Shell Director
42216/60000 EEM TCL Proc
10656/12000 Inspect Init Msg
11036/12000 SPAN Subsystem
39432/48000 Init
58616/60000 EEM Auto Registration Proc
10968/12000 Auto Upgrade Startup Process
10696/12000 DIB error message
11052/12000 SASL MAIN
10884/12000 LICENSE AGENT DEFAULT
10876/12000 RADIUS INITCONFIG
5048/6000   Rom Random Update Process
10996/12000 URPF stats
141636/144000 TCP Command
9552/12000 TFTP Read Process
10944/12000 EM Action CNS
38368/48000 Virtual Exec
Interrupt level stacks:
Level    Called Unused/Size Name
1    74177501 16476/18000 Network devices
2           0 18000/18000 One Shot Timer
5           3 17872/18000 Console Uart
7    37018943 17916/18000 Clocktick Interrupt
System was restarted by bus error at PC 0x14F40AF, address 0x14F40AF at 14:50:19 MSK Thu Mar 15 2012
C3900e Software (C3900e-UNIVERSALK9_NPE-M), Version 15.1(4)M3, RELEASE SOFTWARE (fc1)
Technical Support: http://www.cisco.com/techsupport
Compiled Tue 06-Dec-11 20:22 by prod_rel_team (current version)
Image text-base: 0x0010176C, data-base: 0x04FE3200
Stack trace from system failure:
FP: 0x1E9B7170, RA: 0x4FDC574
FP: 0x1E9B719C, RA: 0x4FDC527
FP: 0x1E9B71B8, RA: 0x190D227
FP: 0x1E9B7210, RA: 0x190CE69
FP: 0x1E9B7254, RA: 0x190CC2A
FP: 0x1E9B7270, RA: 0x190CBDB
FP: 0x1E9B7288, RA: 0x190E05A
FP: 0x1E9B72BC, RA: 0x285ED30
******* Information of Last System Crash **********
Using flash0:crashinfo_20120315-145019-MSK.
This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.
A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html
If you require further assistance please contact us by sending email to
[email protected].
Mar 14 10:32:39.945: %LINK-3-UPDOWN: Interface GigabitEthernet0/0, changed state to up
Mar 14 10:32:39.945: %LINK-3-UPDOWN: Interface GigabitEthernet0/1, changed state to down
Mar 14 10:32:39.945: %LINK-3-UPDOWN: Interface GigabitEthernet0/2, changed state to down
Mar 14 10:32:39.945: %LINK-3-UPDOWN: Interface GigabitEthernet0/3, changed state to down
Mar 14 10:32:41.185: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0/0, changed state to up
Mar 14 10:32:41.185: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0/1, changed state to down
Mar 14 10:32:41.185: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0/2, changed state to down
Mar 14 10:32:41.185: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0/3, changed state to downCisco CISCO3925-CHASSIS (revision 1.0) with C3900-SPE200/K9 with 1015808K bytes of memory.
Processor board ID FCZ153920YC
4 Gigabit Ethernet interfaces
DRAM configuration is 72 bits wide with parity enabled.
256K bytes of non-volatile configuration memory.
255744K bytes of ATA System CompactFlash 0 (Read/Write)
CMD: 'version 15.1' 10:32:45 UTC Wed Mar 14 2012
CMD: 'service timestamps debug datetime localtime' 10:32:45 UTC Wed Mar 14 2012
CMD: 'service timestamps log datetime localtime' 10:32:45 UTC Wed Mar 14 2012
CMD: PASSWORD statement not printed
CMD: 'hostname i3925E-0-(offline)' 10:32:45 UTC Wed Mar 14 2012
% Hostname contains one or more illegal characters.
Mar 14 10:32:45: %CNS-3-WARNING: CNS ID not changed: bad hostname -Process= "Init", ipl= 0, pid= 3
Mar 14 10:32:45: %CNS-3-WARNING: CNS ID not changed: bad hostname -Process= "Init", ipl= 0, pid= 3
Mar 14 10:32:45: %CNS-3-WARNING: CNS ID not changed: bad hostname -Process= "Init", ipl= 0, pid= 3
CMD: 'boot-start-marker' 10:32:45 UTC Wed Mar 14 2012
CMD: 'boot system flash0 c3900e-universalk9_npe-mz.SPA.151-4.M3.bin' 10:32:45 UTC Wed Mar 14 2012
CMD: 'boot-end-marker' 10:32:45 UTC Wed Mar 14 2012
CMD: 'logging discriminator DROP mnemonics drops CFGLOG ' 10:32:45 UTC Wed Mar 14 2012
CMD: 'logging buffered 1024000' 10:32:45 UTC Wed Mar 14 2012
CMD: 'no logging console' 10:32:45 UTC Wed Mar 14 2012
CMD: 'logging monitor discriminator DROP' 10:32:45 UTC Wed Mar 14 2012
CMD: PASSWORD statement not printed
CMD: 'no aaa new-model' 10:32:45 UTC Wed Mar 14 2012
CMD: 'clock timezone MSK 4 0' 10:32:45 UTC Wed Mar 14 2012
Mar 14 14:32:45: %SYS-6-CLOCKUPDATE: System clock has been updated from 10:32:45 UTC Wed Mar 14 2012 to 14:32:45 MSK Wed Mar 14 2012, configured from console by console.
CMD: 'no ipv6 cef' 14:32:45 MSK Wed Mar 14 2012
CMD: 'no ip source-route' 14:32:45 MSK Wed Mar 14 2012
CMD: 'ip cef' 14:32:45 MSK Wed Mar 14 2012
CMD: 'no ip domain lookup' 14:32:45 MSK Wed Mar 14 2012
CMD: 'ip name-server 8.8.8.8' 14:32:45 MSK Wed Mar 14 2012
CMD: 'multilink bundle-name authenticated' 14:32:45 MSK Wed Mar 14 2012
CMD: 'crypto pki token default removal timeout 0' 14:32:45 MSK Wed Mar 14 2012
CMD: 'license udi pid C3900-SPE200/K9 sn xxxxxxxxxxxx' 14:32:45 MSK Wed Mar 14 2012
CMD: 'archive' 14:32:45 MSK Wed Mar 14 2012
CMD: ' log config' 14:32:45 MSK Wed Mar 14 2012
CMD: ' logging enable' 14:32:45 MSK Wed Mar 14 2012
CMD: ' notify syslog contenttype plaintext' 14:32:45 MSK Wed Mar 14 2012
CMD: ' path flash:/CFG/config' 14:32:45 MSK Wed Mar 14 2012
CMD: ' write-memory' 14:32:45 MSK Wed Mar 14 2012
CMD: 'redundancy' 14:32:45 MSK Wed Mar 14 2012
CMD: 'ip rcmd remote-host user x.x.x.x user enable' 14:32:45 MSK Wed Mar 14 2012
CMD: 'interface GigabitEthernet0/0' 14:32:45 MSK Wed Mar 14 2012
CMD: ' description if-to-Customers' 14:32:45 MSK Wed Mar 14 2012
CMD: ' bandwidth 1000000' 14:32:45 MSK Wed Mar 14 2012
CMD: ' no ip address' 14:32:45 MSK Wed Mar 14 2012
CMD: ' load-interval 30' 14:32:45 MSK Wed Mar 14 2012
CMD: ' duplex auto' 14:32:45 MSK Wed Mar 14 2012
CMD: ' speed auto' 14:32:45 MSK Wed Mar 14 2012
CMD: ' media-type rj45' 14:32:45 MSK Wed Mar 14 2012
CMD: 'interface GigabitEthernet0/0.98' 14:32:45 MSK Wed Mar 14 2012
CMD: ' encapsulation dot1Q 98' 14:32:45 MSK Wed Mar 14 2012
CMD: ' ip address x.x.x.x 255.255.255.0' 14:32:45 MSK Wed Mar 14 2012
CMD: ' ip nat outside' 14:32:45 MSK Wed Mar 14 2012
CMD: ' no ip virtual-reassembly in' 14:32:46 MSK Wed Mar 14 2012
Mar 14 14:32:46: %IP_VFR-7-FEATURE_DISABLE_IN: VFR(in) is manually disabled through CLI; VFR support for features that have internally enabled, will be made available only when VFR is enabled manually on interface GigabitEthernet0/0.98
CMD: ' arp timeout 180' 14:32:46 MSK Wed Mar 14 2012
CMD: 'interface GigabitEthernet0/1' 14:32:46 MSK Wed Mar 14 2012
CMD: ' bandwidth 1000000' 14:32:46 MSK Wed Mar 14 2012
CMD: ' no ip address' 14:32:46 MSK Wed Mar 14 2012
CMD: ' no ip unreachables' 14:32:46 MSK Wed Mar 14 2012
CMD: ' load-interval 30' 14:32:46 MSK Wed Mar 14 2012
CMD: ' shutdown' 14:32:46 MSK Wed Mar 14 2012
CMD: ' duplex auto' 14:32:46 MSK Wed Mar 14 2012
CMD: ' speed auto' 14:32:46 MSK Wed Mar 14 2012
CMD: ' media-type rj45' 14:32:46 MSK Wed Mar 14 2012
CMD: 'interface GigabitEthernet0/2' 14:32:46 MSK Wed Mar 14 2012
CMD: ' no ip address' 14:32:46 MSK Wed Mar 14 2012
CMD: ' shutdown' 14:32:46 MSK Wed Mar 14 2012
CMD: ' duplex auto' 14:32:46 MSK Wed Mar 14 2012
CMD: ' speed auto' 14:32:46 MSK Wed Mar 14 2012
CMD: 'interface GigabitEthernet0/3' 14:32:46 MSK Wed Mar 14 2012
CMD: ' no ip address' 14:32:46 MSK Wed Mar 14 2012
CMD: ' duplex auto' 14:32:46 MSK Wed Mar 14 2012
CMD: ' speed auto' 14:32:46 MSK Wed Mar 14 2012
CMD: 'ip forward-protocol nd' 14:32:46 MSK Wed Mar 14 2012
CMD: 'no ip http server' 14:32:46 MSK Wed Mar 14 2012
CMD: 'no ip http secure-server' 14:32:46 MSK Wed Mar 14 2012
CMD: 'ip flow-export version 5' 14:32:46 MSK Wed Mar 14 2012
CMD: 'ip flow-export destination x.x.x.x xxxx 14:32:46 MSK Wed Mar 14 2012
CMD: 'ip flow-top-talkers' 14:32:46 MSK Wed Mar 14 2012
CMD: ' top 50' 14:32:46 MSK Wed Mar 14 2012
CMD: ' sort-by bytes' 14:32:46 MSK Wed Mar 14 201
CMD: 'ip route 0.0.0.0 0.0.0.0 x.x.x.x' 14:32:46 MSK Wed Mar 14 2012
CMD: 'logging source-interface GigabitEthernet0/0.98' 14:32:46 MSK Wed Mar 14 2012
CMD: 'logging host x.x.x.x discriminator DROP' 14:32:46 MSK Wed Mar 14 2012
CMD: 'logging host x.x.x.x discriminator DROP' 14:32:46 MSK Wed Mar 14 2012
CMD: PASSWORD statement not printed
CMD: 'snmp-server host x.x.x.x public ' 14:32:46 MSK Wed Mar 14 2012
CMD: 'snmp-server manager' 14:32:46 MSK Wed Mar 14 2012
CMD: 'control-plane' 14:32:46 MSK Wed Mar 14 2012
CMD: 'line con 0' 14:32:46 MSK Wed Mar 14 2012
CMD: PASSWORD statement not printed
CMD: ' logging synchronous' 14:32:46 MSK Wed Mar 14 2012
CMD: ' login' 14:32:46 MSK Wed Mar 14 2012
CMD: 'line aux 0' 14:32:46 MSK Wed Mar 14 2012
CMD: ' login' 14:32:46 MSK Wed Mar 14 2012
CMD: ' no exec' 14:32:46 MSK Wed Mar 14 2012
CMD: 'line vty 0 5' 14:32:46 MSK Wed Mar 14 2012
CMD: ' exec-timeout 30 0' 14:32:46 MSK Wed Mar 14 2012
CMD: PASSWORD statement not printed
CMD: ' logging synchronous' 14:32:46 MSK Wed Mar 14 2012
CMD: ' login' 14:32:46 MSK Wed Mar 14 2012
CMD: ' transport input all' 14:32:46 MSK Wed Mar 14 2012
CMD: 'scheduler allocate 20000 1000' 14:32:46 MSK Wed Mar 14 2012
CMD: 'ntp server x.x.x.x' 14:32:46 MSK Wed Mar 14 2012
CMD: 'event manager environment _syslog_test Configured' 14:32:46 MSK Wed Mar 14 2012
CMD: 'event manager directory user policy "flash0:/USER/"' 14:32:46 MSK Wed Mar 14 2012
CMD: 'event manager directory user repository flash0:/USER/' 14:32:46 MSK Wed Mar 14 2012
CMD: 'event manager policy Multiple-test.tcl' 14:32:46 MSK Wed Mar 14 2012
Mar 14 14:32:46: %LINEPROTO-5-UPDOWN: Line protocol on Interface NVI0, changed state to up
CMD: 'end' 14:32:46 MSK Wed Mar 14 2012
Mar 14 14:32:46: %SYS-5-CONFIG_I: Configured from memory by console
SETUP: new interface NVI0 placed in "shutdown" state
Mar 14 14:32:48: %LINK-5-CHANGED: Interface GigabitEthernet0/0, changed state to reset
Mar 14 14:32:48: %LINK-5-CHANGED: Interface GigabitEthernet0/1, changed state to administratively down
Mar 14 14:32:48: %LINK-5-CHANGED: Interface GigabitEthernet0/2, changed state to administratively down
Mar 14 14:32:49: %LINK-5-CHANGED: Interface NVI0, changed state to administratively down
Mar 14 14:32:49: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0/0, changed state to down
Mar 14 14:32:50: %LINEPROTO-5-UPDOWN: Line protocol on Interface NVI0, changed state to down
Mar 14 14:32:52: %LINK-3-UPDOWN: Interface GigabitEthernet0/0, changed state to down
Mar 14 14:32:55: %LINK-3-UPDOWN: Interface GigabitEthernet0/0, changed state to up
Mar 14 14:32:56: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0/0, changed state to up
Mar 14 14:32:56: %SYS-5-RESTART: System restarted --
Cisco IOS Software, C3900e Software (C3900e-UNIVERSALK9_NPE-M), Version 15.1(4)M3, RELEASE SOFTWARE (fc1)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2011 by Cisco Systems, Inc.
Compiled Tue 06-Dec-11 20:22 by prod_rel_team
Mar 14 14:32:56: %SNMP-5-COLDSTART: SNMP agent on host i3925E-0-(offline) is undergoing a cold start
Mar 14 14:32:58: %SYS-6-BOOTTIME: Time taken to reboot after reload = 121 seconds
Mar 14 14:32:59: %SYS-6-LOGGINGHOST_STARTSTOP: Logging to host xx.x..xx port 514 started - CLI initiated
CMD: 'enable' 14:36:05 MSK Thu Mar 15 2012
CMD: 'sho event manager policy registered ' 14:36:12 MSK Thu Mar 15 2012
CMD: 'sho logg' 14:36:26 MSK Thu Mar 15 2012
CMD: 'sho run | inc logg' 14:37:34 MSK Thu Mar 15 2012
CMD: 'sho run | sec DROP' 14:38:35 MSK Thu Mar 15 2012
CMD: 'sho run | sec CFGLOG' 14:39:09 MSK Thu Mar 15 2012
CMD: 'conf t' 14:39:42 MSK Thu Mar 15 2012
CMD: 'no logging discriminator DROP mnemonics drops CFGLOG ' 14:39:45 MSK Thu Mar 15 2012
Mar 15 14:39:45: %PARSER-5-CFGLOG_LOGGEDCMD: User:vty0 logged command:no logging discriminator DROP
CMD: 'conf t' 14:39:51 MSK Thu Mar 15 2012
CMD: 'logging monitor ' 14:40:16 MSK Thu Mar 15 2012
Mar 15 14:40:16: %PARSER-5-CFGLOG_LOGGEDCMD: User:vty0 logged command:logging monitor
CMD: 'do sho logg' 14:40:24 MSK Thu Mar 15 2012
CMD: 'sho logg' 14:40:24 MSK Thu Mar 15 2012
CMD: 'logging buffered ' 14:40:41 MSK Thu Mar 15 2012
Mar 15 14:40:41: %PARSER-5-CFGLOG_LOGGEDCMD: User:vty0 logged command:logging buffered
CMD: 'logg x.x.x.x 14:41:04 MSK Thu Mar 15 2012
Mar 15 14:41:04: %PARSER-5-CFGLOG_LOGGEDCMD: User:vty0 logged command:logging x.x.x.x
CMD: 'do sho logg' 14:41:12 MSK Thu Mar 15 2012
CMD: 'sho logg' 14:41:12 MSK Thu Mar 15 2012
CMD: 'do sho logg | inc DROP' 14:41:44 MSK Thu Mar 15 2012
CMD: 'sho logg | inc DROP' 14:41:44 MSK Thu Mar 15 2012
CMD: 'do sho logg ' 14:41:55 MSK Thu Mar 15 2012
CMD: 'sho logg' 14:41:55 MSK Thu Mar 15 2012
CMD: 'do term mon' 14:42:13 MSK Thu Mar 15 2012
CMD: 'term mon' 14:42:13 MSK Thu Mar 15 2012
CMD: 'exi' 14:42:20 MSK Thu Mar 15 2012
Mar 15 14:42:20: %SYS-5-CONFIG_I: Configured from console by vty0 (x.x.x.x)
Mar 15 14:42:20: %HA_EM-6-LOG: Multiple-test.tcl: START polycy #1...
Mar 15 14:42:20: %HA_EM-6-LOG: Multiple-test.tcl: ENTRY status not exist...
CMD: 'conf t' 14:47:16 MSK Thu Mar 15 2012
Mar 15 14:47:17: %SYS-5-CONFIG_I: Configured from console by vty0 ()
Mar 15 14:47:17: %HA_EM-6-LOG: Multiple-test.tcl: START polycy #1...
Mar 15 14:47:17: %HA_EM-6-LOG: Multiple-test.tcl: ENTRY status not exist...
CMD: 'sho run | inc logg' 14:48:27 MSK Thu Mar 15 2012
CMD: 'conf t' 14:48:40 MSK Thu Mar 15 2012
CMD: 'logging discriminator DROP1 mnemonics drops HA_EM ' 14:48:59 MSK Thu Mar 15 2012
Mar 15 14:48:59: %PARSER-5-CFGLOG_LOGGEDCMD: User:vty0 logged command:logging discriminator DROP1 mnemonics drops HA_EM
CMD: 'logging discriminator DROP1 mnemonics drops LOG ' 14:49:17 MSK Thu Mar 15 2012
Mar 15 14:49:17: %PARSER-5-CFGLOG_LOGGEDCMD: User:vty0 logged command:logging discriminator DROP1 mnemonics drops LOG
Mar 15 14:49:19: %SYS-5-CONFIG_I: Configured from console by vty0 ()
Mar 15 14:49:19: %HA_EM-6-LOG: Multiple-test.tcl: START polycy #1...
Mar 15 14:49:19: %HA_EM-6-LOG: Multiple-test.tcl: ENTRY status not exist...
CMD: 'conf t' 14:49:27 MSK Thu Mar 15 2012
CMD: 'logging monitor discriminator DROP1' 14:50:19 MSK Thu Mar 15 2012
Mar 15 14:50:19: %PARSER-5-CFGLOG_LOGGEDCMD: User:vty0 logged command:logging monitor discriminator DROP1
Mar 15 14:50:19: %SYS-5-CONFIG_I: Configured from console by vty0 ()
14:50:19 MSK Thu Mar 15 2012: Unexpected exception to CPU: vector D, PC = 0x14F40AF
-Traceback= 14F40AF 85A 4FDC574 4FDC527 190D227 190CE69 190CC2A 190CBDB
CPU Register Context:
EAX = 0x1E9B71D4 ECX = 0x014F408B EDX = 0x1E9B71D0 EBX = 0x000000D3
ESP = 0x1E9B70C8 EBP = 0x1E9B7170 ESI = 0x0000085A EDI = 0x00000001
EIP = 0x014F40AF PS   = 0x00010206 CS = 0x00000008 SS   = 0x00000010
DS = 0x00000010 ES   = 0x00000010 FS = 0x00000010 GS   = 0x00000010
========= Start of Crashinfo Collection (14:50:19 MSK Thu Mar 15 2012) =========
For image:
Cisco IOS Software, C3900e Software (C3900e-UNIVERSALK9_NPE-M), Version 15.1(4)M3, RELEASE SOFTWARE (fc1)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2011 by Cisco Systems, Inc.
Compiled Tue 06-Dec-11 20:22 by prod_rel_team
========= Malloc and Free Traces ===============================================
MallocFree Trace: ixmallocfree=0xD ptr=0x9DD3C48
9DD3BE0: 1F421B68 4E5DD21 1F4223A0 600003B2 1F6F1E40 4000061C 1F6F1E40 4E4B0D3
9DD3C00: 1F6F1E40 4E4BC70 1F6F2AA8 60000398 1FB0DA8C 15677BC 1FB0E678 600003C6
9DD3C20: 1F1DB08C 40000060 1F1DB08C 153FBB1 1D9E48E4 40000204 1D9E48E4 190D088
9DD3C40: 1F40912C 40000546 1F40912C 190D133 1FB0E678 400002CA 1FB0E678 4E4B0D3
9DD3C60: 1FB0E678 4E6187F 1FB0EC3C 600000E4 1F4223A0 400002CA 1F4223A0 4E4B0D3
9DD3C80: 1F4223A0 4E6187F 1F422964 600000D0 1D9E48E4 400002CA 1D9E48E4 4E4B0D3
9DD3CA0: 1D9E48E4 4E6187F 1D9E4EA8 60000096 1FB0E678 400002CA 1FB0E678 4E4B0D3
9DD3CC0: 1FB0E678 4E6187F 1FB0EC3C 600000E4 1F4223A0 400002CA 1F4223A0 4E4B0D3
9DD3CE0: 1F4223A0 4E6187F 1F422964 600000D0 1D9E48E4 400002CA 1D9E48E4 4E4B0D3
9DD3D00: 1D9E48E4 4E6187F 1D9E4EA8 60000096 1FB0E678 400002CA 1FB0E678 4E4B0D3
9DD3D20: 1FB0E678 4E6187F 1FB0EC3C 600000E4 1F4223A0 400002CA 1F4223A0 4E4B0D3
9DD3D40: 1F4223A0 4E6187F 1F422964 600000D0 1D9E48E4 400002CA 1D9E48E4 4E4B0D3
9DD3D60: 1D9E48E4 4E6187F 1D9E4EA8 60000096 1FB0E678 400002CA 1FB0E678 4E4B0D3
9DD3D80: 1FB0E678 4E6187F 1FB0EC3C 600000E4 1F4223A0 400002CA 1F4223A0 4E4B0D3
9DD3DA0: 1F4223A0 4E6187F 1F422964 600000D0 1D9E48E4 400002CA 1D9E48E4 4E4B0D3
9DD3DC0: 1D9E48E4 4E6187F 1D9E4EA8 60000096 1F1DB834 4E62135 1F1DBE04 600000E2
ChunkMallocFree Trace: ixchunkmallocfree=0x9 ptr=0x9DEF16C
9DEF100: 285CF44 28617F9 1EB10BE4   318BF3   307732 1C18ED7C   318C3F   305775
9DEF120: 1D4F63F0   318C3F   3057C6 1D4F63F0   318C3F   3057C6 1D4F63A0   318BF3
9DEF140:   3058E1 1C18ED7C 285CF44 285B561 1EB10BE4 285CEA5 285B561 1F6982FC
9DEF160:   318BA3   30E02B 1D4F5754 1B16955 1B161B1 1C5644BC 285CF44 28617F9
9DEF180: 1EB10BE4   318BF3   307732 1C18ED7C   318C3F   305775 1D4F63F0   318B53
9DEF1A0:   3118A0 1D4F4804   318B53   3118A0 1D4F4828   318B53   3118A0 1D4F484C
9DEF1C0:   318C3F   3057C6 1D4F63F0   318BF3   3058E1 1C18ED7C 285CF44 285B561
9DEF1E0: 1EB10BE4 285CEA5 285B561 1F6982FC 285CEA5 285B35F 1F6982FC 285CF44
9DEF200: 28617F9 1EB10BE4   318BF3   307732 1C18ED7C   318C3F   305775 1D4F63F0
9DEF220:   318C3F   3057C6 1D4F63F0   318BF3   3058E1 1C18ED7C 285CF44 285B561
9DEF240: 1EB10BE4 285CEA5 285B561 1F6982FC 285CEA5 285B35F 1F6982FC 285CF44
9DEF260: 28617F9 1EB10BE4   318BF3   307732 1C18ED7C   318C3F   305775 1D4F63F0
9DEF280:   318C3F   3057C6 1D4F63F0   318BF3   3058E1 1C18ED7C 285CF44 285B561
9DEF2A0: 1EB10BE4 285CEA5 285B561 1F6982FC 285CEA5 285B35F 1F6982FC 285CF44
9DEF2C0: 28617F9 1EB10BE4   318BF3   307732 1C18ED7C   318C3F   305775 1D4F63F0
9DEF2E0:   318B53   311807 1D4F4804   318B53   311807 1D4F4828   318B53   311807
9DEF300: 1D4F484C   318C3F   3057C6 1D4F63F0   318BF3   3058E1 1C18ED7C 285CF44
9DEF320: 285B561 1EB10BE4 285CEA5 285B561 1F6982FC 285CEA5 285B35F 1F6982FC
9DEF340: 285CF44 28617F9 1EB10BE4   318BF3   307732 1C18ED7C   318C3F   305775
9DEF360: 1D4F63F0   318C3F   3057C6 1D4F63F0   318BF3   3058E1 1C18ED7C 285CF44
9DEF380: 285B561 1EB10BE4 285CEA5 285B561 1F6982FC 285CEA5 285B35F 1F6982FC
9DEF3A0: 285CF44 28617F9 1EB10BE4   318BF3   307732 1C18ED7C   318C3F   305775
9DEF3C0: 1D4F63F0   318C3F   3057C6 1D4F63F0   318BF3   3058E1 1C18ED7C 285CF44
9DEF3E0: 285B561 1EB10BE4 285CEA5 285B561 1F6982FC 285CEA5 285B35F 1F6982FC
========= Stack Trace ==========================================================
-Traceback= 14F40AF 85A 4FDC574 4FDC527 190D227 190CE69 190CC2A 190CBDB
========= Context ==============================================================
C3900e Software (C3900e-UNIVERSALK9_NPE-M), Version 15.1(4)M3, RELEASE SOFTWARE (fc1)
Technical Support: http://www.cisco.com/techsupport
Compiled Tue 06-Dec-11 20:22 by prod_rel_team
CPU Register Context:
EAX = 0x1E9B71D4 ECX = 0x014F408B EDX = 0x1E9B71D0 EBX = 0x000000D3
ESP = 0x1E9B70C8 EBP = 0x1E9B7170 ESI = 0x0000085A EDI = 0x00000001
EIP = 0x014F40AF PS   = 0x00010206 CS = 0x00000008 SS   = 0x00000010
DS = 0x00000010 ES   = 0x00000010 FS = 0x00000010 GS   = 0x00000010
Signal = 10 Vector = 0xD
========= Stack Dump ===========================================================
Stack Frame Pointer in Context is 0x1E9B70C8, at process level
1E9B6CC8: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF
1E9B6CE8: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF
1E9B6D08: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF
1E9B6D28: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF
1E9B6D48: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF
1E9B6D68: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF
1E9B6D88: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF
1E9B6DA8: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF
1E9B6DC8: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF
1E9B6DE8: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF
1E9B6E08: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF
1E9B6E28: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF
1E9B6E48: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF
1E9B6E68: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF
1E9B6E88: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF
1E9B6EA8: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF
1E9B6EC8: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF
1E9B6EE8: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF
1E9B6F08: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF
1E9B6F28: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF
1E9B6F48: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF
1E9B6F68: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF
1E9B6F88: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF 1C1F0AC0
1E9B6FA8:      4B0 60381F1C 1C1F0AC0      328 1E63B504      438 4C4BD51D 1E63B504
1E9B6FC8:      ABC 4C4BD51D E46F9B1E 8D9DFC04 1DD54B4C 1E9B6FF8        0 84709B1E
1E9B6FE8: C45A8802 1D88C6B8 1E9B6FF8 288CB4A        0 804E3F1F        0 6D6A2500
1E9B7008: 8A1A0000        0 10000F1        0        0 10000F1 1000000 2000000
1E9B7028:        0        0        0 F80C0000        0 58709B1E 9700520 404AD28
1E9B7048:        0 9700520 404B7E4        0 9700520        3 B0709B1E 335D8402
1E9B7068: 1C1ED564        0        0 9700520        3 404B7E4        1        0
1E9B7088: CD41E1C 1C1ED40C        0 36010000 6000000 30000000 1E9B716C 8A080000
1E9B70A8: D3000000 1E9B7178 5A080000 70719B1E        0 AF404F01 470E1000 D000000
1E9B70C8: E4709B1E FCF98202 9700520        0 7AF78202 31340000        0 33B5631E
1E9B70E8: C0D15B1E        1 3490401F        0 6000000 73000000 3000000 1000000
1E9B7108: 1E9B70DC 4000000 1000000        0        0 1E9B70F0        0 5A080000
1E9B7128:      85A 1F409357        1 7C080000 1E9B7134 1E9B7180 87070000 5A080000
1E9B7148: FFFFFFFF        0        0 D3000000        0 20000000        0 FFFFFFFF
1E9B7168: FFFFFFFF 1E9B7178 9C719B1E 74C5FD04 1F40942A FFFFFFFF 54BED16 D4719B1E
1E9B7188:        0      85A 986FF51E 7454F51E 9C62CC0 B8719B1E 27C5FD04 1F409357
1E9B71A8:      85A 54BEC40 CC719B1E CC719B1E 10729B1E 27D29001 1F409357      85A
1E9B71C8: 54BEC40        4        1 1D9E48E4 1F4091F1      9C0       29        1
1E9B71E8:        0        3 9C64024 9C62CC0 7454F51E 9C62CFC 1D9E48E4 7454F51E
1E9B7208: 78AEA71E 986FF51E 54729B1E 69CE9001 C737F1E 64E6EC1D        1   1572B8
1E9B7228:        1        0 9C62CC0 78AEA71E 1EA7AE78 9C62CC0 A000000   150000
1E9B7248: C02CC609        0 15000000 70729B1E 2ACC9001 D9BE8502 1DECE6C4 1E9B72B8
1E9B7268: 9C62CC0 A000000 88729B1E DBCB9001 1E9B72B0 90729B1E 1E9B72B0 9C62CC0
1E9B7288: BC729B1E 5AE09001 9C62CC0 1DECE664        0        1        0        0
1E9B72A8:        0        0        2 1E865DD0        2        0 30ED8502        0
1E9B72C8: FD0110DF AB1234CD FFFE0000        0 515505C 18DA0DD 1E9B732C 1E9B342C
1E9B72E8: 80000018        1        0 1000001 1C1F0F70 1E7FD4FC 1E7FD460 6ADF740
1E9B7308:        C 4000000        0     1D22 FFFFFFFF FFFFFFFF FFFFFFFF        0
1E9B7328: FD0110DF AB1234CD FFFE0000        0 515505C 18DA0DD 1E9B738C 1E9B72E0
1E9B7348: 80000018        1        0 1000001 1C1F0F70 1E3CD1D8 1E7FD4B0 6AE25A0
1E9B7368:        E 4000000        0     204F FFFFFFFF FFFFFFFF FFFFFFFF        0
1E9B7388: FD0110DF AB1234CD FFFE0000        0 515505C 18DA101 1E9B73D8 1E9B7340
1E9B73A8: 8000000E        1        0 1000001 1C1F0F70 746D5F66 7379735F 75736167
1E9B73C8: 652E7463 6C000000        0 FD0110DF AB1234CD FFFE0000        0 515505C
1E9B73E8: 18DA0DD 1E9B7438 1E9B73A0 80000018        1        0 1000001 1C1F0F70
1E9B7408: 1E7FD5A8 1E7FD55C        0       11 6000000        0        0 FFFFFFFF
1E9B7428: FFFFFFFF FFFFFFFF        0 FD0110DF AB1234CD FFFE0000        0 515505C
1E9B7448: 18DA101 1E9B7484 1E9B73EC 8000000E        1        0 1000001 1C1F0F70
1E9B7468: 65656D5F 706E745F 30000000        0        0        0 FD0110DF AB1234CD
1E9B7488: FFFE0000        0 515505C 18DA0DD 1E9B74E4 1E9B744C 80000018        1
1E9B74A8:        0 1000001 1C1F0F70 1E9B78BC 1E7FD608        0       14 6000000
========= Process Level Info ===================================================
---- Current Process Stack (0x324 bytes used, out of 0x3E80 available) ----
Current SP = 0x1E9B70C8, saved SP = 0x1C1D2628
1E9B6FA4: 1C1F0AC0      4B0 60381F1C 1C1F0AC0      328 1E63B504      438 4C4BD51D
1E9B6FC4: 1E63B504      ABC 4C4BD51D E46F9B1E 8D9DFC04 1DD54B4C 1E9B6FF8        0
1E9B6FE4: 84709B1E C45A8802 1D88C6B8 1E9B6FF8 288CB4A        0 804E3F1F        0
1E9B7004: 6D6A2500 8A1A0000        0 10000F1        0        0 10000F1 1000000
1E9B7024: 2000000        0        0        0 F80C0000        0 58709B1E 9700520
1E9B7044: 404AD28        0 9700520 404B7E4        0 9700520        3 B0709B1E
1E9B7064: 335D8402 1C1ED564        0        0 9700520        3 404B7E4        1
1E9B7084:        0 CD41E1C 1C1ED40C        0 36010000 6000000 30000000 1E9B716C
1E9B70A4: 8A080000 D3000000 1E9B7178 5A080000 70719B1E        0 AF404F01 470E1000
1E9B70C4: D000000 E4709B1E FCF98202 9700520        0 7AF78202 31340000        0
1E9B70E4: 33B5631E C0D15B1E        1 3490401F        0 6000000 73000000 3000000
1E9B7104: 1000000 1E9B70DC 4000000 1000000        0        0 1E9B70F0        0
1E9B7124: 5A080000      85A 1F409357        1 7C080000 1E9B7134 1E9B7180 87070000
1E9B7144: 5A080000 FFFFFFFF        0        0 D3000000        0 20000000        0
1E9B7164: FFFFFFFF FFFFFFFF 1E9B7178 9C719B1E 74C5FD04 1F40942A FFFFFFFF 54BED16
1E9B7184: D4719B1E        0      85A 986FF51E 7454F51E 9C62CC0 B8719B1E 27C5FD04
1E9B71A4: 1F409357      85A 54BEC40 CC719B1E CC719B1E 10729B1E 27D29001 1F409357
1E9B71C4:      85A 54BEC40        4        1 1D9E48E4 1F4091F1      9C0       29
1E9B71E4:        1        0        3 9C64024 9C62CC0 7454F51E 9C62CFC 1D9E48E4
1E9B7204: 7454F51E 78AEA71E 986FF51E 54729B1E 69CE9001 C737F1E 64E6EC1D        1
1E9B7224:   1572B8        1        0 9C62CC0 78AEA71E 1EA7AE78 9C62CC0 A000000
1E9B7244:   150000 C02CC609        0 15000000 70729B1E 2ACC9001 D9BE8502 1DECE6C4
1E9B7264: 1E9B72B8 9C62CC0 A000000 88729B1E DBCB9001 1E9B72B0 90729B1E 1E9B72B0
1E9B7284: 9C62CC0 BC729B1E 5AE09001 9C62CC0 1DECE664        0        1        0
1E9B72A4:        0        0        0        2 1E865DD0        2        0 30ED8502
1E9B72C4:        0
========= Interrupt Level Stack Dump ===========================================
========= Interrupt Stack ======================================================
---- Level 1 Interrupt stack (0x618 bytes used, out of 0x4650 available) ----
intstacks[1]: base 0x1D48ED84 stack 0x1D4933D0 routine 0x1F41F6
              size 0x4650     low   0x4650     desc    Network devices
1D492DBC: E02D491D E02D491D E82D491D E82D491D B7222000 7000000 8000000 78000000
1D492DDC: 1CA7DAA0 C0000000 1000000 302E491D 102E491D 102E491D B7222000 7000000
1D492DFC: 28000000 28000000        0 C0000000 1000000 682E491D 521E2000 882E491D
1D492E1C: 582F491D        0 582F491D 782E491D 938FDB01 802E491D 938FDB01 5C2E491D
1D492E3C:        1        0        0 882E491D 42F491D 1D492E88 42F491D FC31491D
1D492E5C: A0103FB 1CA7DAA0 A0DAA71C        0        0        0 A0103FB 802F491D
1D492E7C: 778BDD01 1CA7DAA0 A0103FB 1D492F58        0        0        0        1
1D492E9C:        1        0        0        0        0 40010000 1D492F04        0
1D492EBC: 42F491D E02E491D 15B2DD01 E030491D 9CD4EEC 282F491D 982F491D 7431491D
1D492EDC: 1CA7DAA0 FC2E491D 1D44DD01 1D492F04 7431491D 982F491D 1CA7DAA0 B12D612
1D492EFC: E831491D E5722E00 1CA7DAA0 B12D612 B12D626        0        0        0
1D492F1C: A0002FB FFFFFFFF        0        0        0       17    60000        0
1D492F3C:        0        0        0        0 1C1F0E44 70461F1C 682F491D 8D9DFC04
1D492F5C: 1C1F4670 1D492F7C E065351C 830491D C45A8802 1D88C598 1D492F7C 288CB4A
1D492F7C: 8A7A2E00 6000000        0 1CA7DAA0        6 FFFFFFFE 1CA7DAA0 FFFFFFFE
1D492F9C:        0 1000004 8D9DFC04 1C1F4670 1D492FC8 6014341C 5430491D 1CA7DAA0
1D492FBC: 1D88C598 1CA7DAA0 288CB4A EC2F491D EC2F491D B7222000 7000000 1D5C9D44
1D492FDC: 1430491D 37478502        6 1030491D AD324C00        0 6000000 F027981D
1D492FFC: 1D982800 1D9827F0 2020000 C7188502      206 1D9826A0 1D98279C 97B785C
1D49301C: 3830491D 446B9000 97B785C 1D98279C        2 A026981D        1 6030491D
1D49303C: 57958502        1 46020000 88929000      206        0 5C30491D 8929000
1D49305C: 8C30491D 2B938502        1 8430491D 8430491D 21EB8402 1000000 1C179EC8
1D49307C: C89E171C 1C3565E0        6 A026981D A030491D D3C18502        0 1C3565E0
1D49309C: 1C3565E0 BC30491D 4BFC4A00 1C179EC8 C430491D ED24BB01 1C179EC8 FB02000A
1D4930BC: FB02000A        6 D030491D 8F52B701 5862340A 2031491D 9E49B701 1C3565E0
1D4930DC: 57F85000 1CA7DAA0 B12D612 2418541C 1CA7DAA0 E065351C 9195000 1040000
1D4930FC: A0002FB 56142C4 767CCA09        6 1D60B6C0 3031491D E065351C        7
1D49311C: 1C3565E0 3431491D CAB98602 1C3565E0 A34624A 1C3565E0 A831491D 12488B02
1D49313C:        7 1C3565E0        0        0        0        1        0 1D4931B0
1D49315C:        0        1        0 757CCA09        1 8061631E E065351C A0DAA71C
1D49317C:        0 4A62340A    80000        4        1 E065351C E065351C 1D60B6C0
1D49319C: E065351C A34624A 1C541824 C831491D 62378B02 94E38402 6D31268        0
1D4931BC: 1C3565E0       63 E065351C DC31491D CAB98602 1C3565E0       63 1C3565E0
1D4931DC: C32491D 91504900       63 A0DAA71C 9000000        9 C32491D 34A38202
1D4931FC: 1E1000DC 1E107EAC 28AA52D 28AA52D 3432491D 2DA58A02 1E1000DC 1E107EAC
1D49321C:        1        0 1E107EAC 1CA7DAA0 9000000 A0DAA71C 8832491D 25121F00
1D49323C:        9 1CA7DAA0 12000000   D6120B A0DAA71C 1C3565E0 A0DAA71C E04E4900
1D49325C: 1D630C4C 1D653C00   D6120B 1CA7DAA0 4662340A 1D60B6C0 A0DAA71C    10000
1D49327C:   2834FA 1D60B6C0 18DBA71C A032491D 11251F00 6A86E44 A0DAA71C    10000
1D49329C: B12D60C C33491D 627A2800 1D60B6C0 1CA7DAA0   2834FA B12D60C 8C5A8802
1D4932BC: 7000000        0 C0B6601D A0DAA71C 7EAF8802 38D4601D        0 F832491D
1D4932DC: B12D600   620000 1D60B6C0 1C541824 1C541824        0 1CA7DAA0 1D60C348
1D4932FC: A0DAA71C 60CACB0A 1D60B6C0 F8A0D306 8833491D 519E2800 8833491D 5C33491D
1D49331C: 5C33491D 5AD94700 1D60B6C0 38D4601D 60E90106 5D6FE9C      600 6033491D
1D49333C: 57958502 18DBA71C 1CA7DAA0        0 1CA7DAA0 1D60D438 F8050000 F0CFCB0A
1D49335C: 38D4601D 60CACB0A        0 C0B6601D C0B6601D 1D60B6C0 B4E8621D 1D662380
1D49337C:        0       20 1CA7DAA0 AC33491D 1AA62800 1D60B6C0        0        0
1D49339C:        1 1D60B6C0 1D60B6C0 80060000 C433491D 73A62800 C433491D 85A82500
1D4933BC: 80060000 14983206 8C709B1E 1E212000 1D60B6C0 FFFFFFFF
---- Level 2 Interrupt stack (0x0 bytes used, out of 0x4650 available) ----
intstacks[2]: base 0x1D48A734 stack 0x1D48ED80 routine 0x25650A
              size 0x4650     low   0x4650     desc    One Shot Timer
---- Level 5 Interrupt stack (0x80 bytes used, out of 0x4650 available) ----
intstacks[5]: base 0x1D4860E4 stack 0x1D48A730 routine 0x20C4F6
              size 0x4650     low   0x4650     desc    Console Uart
1D48A6B4: C4A6481D 17BF2000 3F90000 D000000 DCA6481D E1BA2000 FFFFFFFF E0A6481D
1D48A6D4: 17BF2000 1C17676F 8A7481D 24C42000 1C174618 FFFFFFFF FFFFFFFF FFFFFFFF
1D48A6F4: 1C174618        0 8A7481D CCBE2000 2FA0000 28A7481D 6CC52000 FFFFFFFF
1D48A714: FFFFFFFF FFFFFFFF 30A7481D F6C42000 4983206 B0E3781D C6222000 FFFFFFFF
---- Level 7 Interrupt stack (0x54 bytes used, out of 0x4650 available) ----
intstacks[7]: base 0x1D481A94 stack 0x1D4860E0 routine 0x91D8F0
              size 0x4650     low   0x4650     desc    Clocktick Interrupt
1D486090:        0 536CFF2        0 536CFF6 1D78E474 46020000 D22B8502      202
1D4860B0: EDBF9000 FFFFFFFF C860481D 6B872200 D060481D 67938202 D060481D 25DA9100
1D4860D0: D860481D BFD99100 20261D1C C6222000 FFFFFFFF
========= Register Memory Dump =================================================
Reg00(EAX): 1E9B71D4
Reg01(EBX):       D3
Reg02(ECX): 14F408B
Reg03(EDX): 1E9B71D0
Reg04(ESP): 1E9B70C8
Reg05(EBP): 1E9B7170
Reg06(ESI):      85A
Reg07(EDI):        1
Reg08(EIP): 14F40AF
Reg09(PS ):    10206
Reg10(CS ):        8
Reg11(SS ):       10
Reg12(DS ):       10
Reg13(ES ):       10
Reg14(FS ):       10
Reg15(GS ):       10
buffer check=0 sched_hc=0x0
---- block0 ptr=1E9B7068 is_malloc=0 length=0x260 ----
1E9B7028:        0        0        0 F80C0000        0 58709B1E 9700520 404AD28
1E9B7048:        0 9700520 404B7E4        0 9700520        3 B0709B1E 335D8402
1E9B7068: 1C1ED564        0        0 9700520        3 404B7E4        1        0
1E9B7088: CD41E1C 1C1ED40C        0 36010000 6000000 30000000 1E9B716C 8A080000
1E9B70A8: D3000000 1E9B7178 5A080000 70719B1E        0 AF404F01 470E1000 D000000
1E9B70C8: E4709B1E FCF98202 9700520        0 7AF78202 31340000        0 33B5631E
1E9B70E8: C0D15B1E        1 3490401F        0 6000000 73000000 3000000 1000000
1E9B7108: 1E9B70DC 4000000 1000000        0        0 1E9B70F0        0 5A080000
1E9B7128:      85A 1F409357        1 7C080000 1E9B7134 1E9B7180 87070000 5A080000
1E9B7148: FFFFFFFF        0        0 D3000000        0 20000000        0 FFFFFFFF
1E9B7168: FFFFFFFF 1E9B7178 9C719B1E 74C5FD04 1F40942A FFFFFFFF 54BED16 D4719B1E
1E9B7188:        0      85A 986FF51E 7454F51E 9C62CC0 B8719B1E 27C5FD04 1F409357
1E9B71A8:      85A 54BEC40 CC719B1E CC719B1E 10729B1E 27D29001 1F409357      85A
1E9B71C8: 54BEC40        4        1 1D9E48E4 1F4091F1      9C0       29        1
1E9B71E8:        0        3 9C64024 9C62CC0 7454F51E 9C62CFC 1D9E48E4 7454F51E
1E9B7208: 78AEA71E 986FF51E 54729B1E 69CE9001 C737F1E 64E6EC1D        1   1572B8
1E9B7228:        1        0 9C62CC0 78AEA71E 1EA7AE78 9C62CC0 A000000   150000
1E9B7248: C02CC609        0 15000000 70729B1E 2ACC9001 D9BE8502 1DECE6C4 1E9B72B8
1E9B7268: 9C62CC0 A000000 88729B1E DBCB9001 1E9B72B0 90729B1E 1E9B72B0 9C62CC0
1E9B7288: BC729B1E 5AE09001 9C62CC0 1DECE664        0        1        0        0
1E9B72A8:        0        0        2 1E865DD0        2        0 30ED8502        0
---- block1 ptr=1C1ED488 is_malloc=1 length=0x1AC ----
1C1ED448:        0        0 1C1ED4FC 1C1ED4C0 1C1ED448 6D31580       69    D0000
1C1ED468:        0        0 5781DD4 2851E0A 2851E14 6D31568        0 FD0110DF
1C1ED488: AB1234CD FFFE0000        0 515505C 2846FA7 1C1ED534 1C1ED3F0 8000003E
1C1ED4A8:        1        0 1000001 1C1F0F70        0        0 1C1ED450 1C1ED414
1C1ED4C8: 1C1ED4B8 6D31580       68    D0000        0        0 5781DE8 2851E0A
1C1ED4E8: 2851E14 6D31568        0        0        0 1C1EC668 1C1ED450 1C1ED4F4
1C1ED508: 6D31580       6A    D0000        0        0 5781DE8 2851E0A 2851E14
1C1ED528: 6D31568        0 FD0110DF AB1234CD FFFE0000        0 515505C 2847042
1C1ED548: 1C1ED610 1C1ED49C 80000056        1        0 1000001 1C1F0F70        0
1C1ED568:        0        0        0        0        0        0        0        0
1C1ED588:        0        0        0        0        0        0        0        0
1C1ED5A8:        0        0        0        0        0        0        0        0
1C1ED5C8:        0        0        0        0        0        0        0        0
1C1ED5E8:        0        0        0        0        0        0        0        0
1C1ED608:        0 FD0110DF AB1234CD FFFE0000        0 5781DC0 28470FE 1C1ED6B8
1C1ED628: 1C1ED548 8000003C        1
---- block2 ptr=9700520 is_malloc=0 length=0x100 ----
97004E0: FFA42200 46020000 8000000 10000000 10000000 10000000 10000000 10000000
9700500:        0   22735A        0        1        0        0        0        0
9700520: 5010EDC        1 6005190 6005190 97B9A6C 97014F8 9700528 6D31580
9700540:        7    10000        1        0 5010EDC 2851E0A 2851E14 6D31568
9700560:        0 DFDCB1E   570000 DF04B36 1FEB7948 20004E20        0       EF
9700580:   5C6802        0        0 1BFFB1E0        0        0    18000     8000
97005A0:        0        0        0        0        0        0        0        0
97005C0: 9700950 9700C98       1E        E        0        E        0       27
97005E0: 1E7C2A28        0        0        0        0        0 1F1DB18C        0
9700600:        0        0       28        F       28       28       33 9700620
---- block3 ptr=CD41E1C is_malloc=0 length=0x100 ----
CD41DDC:      D9B        0      D9B        0      D9B        0      D9B        0
CD41DFC:      D9B        0      E1C        0      E1C        0      E1C        0
CD41E1C:      E1C        0      E1C        0      E1C        0      E1C        0
CD41E3C:      E1C        0      E1C        0      E1C        0      E1C        0
CD41E5C:      E1C        0      E1C        0      E1C        0      E1C        0
CD41E7C:      E1C        0      E9D        0      E9D        0      E9D        0
CD41E9C:      E9D        0      E9D        0      E9D        0      E9D        0
CD41EBC:      E9D        0      E9D        0      E9D        0      E9D        0
CD41EDC:      E9D        0      E9D        0      E9D        0      E9D        0
CD41EFC:      E9D        0      F1E        0      F1E        0      F1E        0
---- block4 ptr=1C1ED38C is_malloc=1 length=0x150 ----
1C1ED34C:      100 1C1ECDAC        0 1C1ED8D8 1C1EC624      100 1C1ECDAC        0
1C1ED36C: 1C1ED3C4 1C1EC754      100        0        0        0        0 FD0110DF
1C1ED38C: AB1234CD FFFE0000        0 53D85F8 28866DC 1C1ED3DC 1C1ECD90 80000010
1C1ED3AC:        1        0 1000001 1C1F0F70 6D656D6F 72790000        0 5BAF9596
1C1ED3CC: 1C1ED368        0 6000008 FD0110DF AB1234CD FFFE0000        0 515505C
1C1ED3EC: 2846F91 1C1ED488 1C1ED3A0 8000003E        1        0 1000001 1C1F0F70
1C1ED40C:        0        0 1C1ED4C0 1C1EC81C 1C1ED40C 6D31580       67    D0000
1C1ED42C:        0        0 5781DD4 2851E0A 2851E14 6D31568        0        0
1C1ED44C:        0 1C1ED4FC 1C1ED4C0 1C1ED448 6D31580       69    D0000        0
1C1ED46C:        0 5781DD4 2851E0A 2851E14 6D31568        0 FD0110DF AB1234CD
1C1ED48C: FFFE0000        0 515505C 2846FA7 1C1ED534 1C1ED3F0 8000003E        1
1C1ED4AC:        0 1000001 1C1F0F70        0        0 1C1ED450 1C1ED414 1C1ED4B8
1C1ED4CC: 6D31580       68    D0000        0
---- block5 ptr=36010000 is_malloc=0 length=0x100 ----
3600FFC0:        0        0        0        0        0        0        0        0
3600FFE0:        0        0        0        0        0        0        0        0
36010000:        0        0        0        0        0        0        0        0
36010020:        0        0        0        0        0        0        0        0
36010040:        0        0        0        0        0        0        0        0
36010060:        0        0        0        0        0        0        0        0
36010080:        0        0        0        0        0        0        0        0
360100A0:        0        0        0        0        0        0        0        0
360100C0:        0        0        0        0        0        0        0        0
360100E0:        0        0        0        0        0        0        0        0
---- block6 ptr=6000000 is_malloc=0 length=0x100 ----
5FFFFC0: 3CF63C89 E4AA954C E121426E 52D198F9 4106CC9E 889F1365 E75A7785 3FA3E8A8
5FFFFE0: AFE382E1 35B3B2F7 86F711F7 723E31F2 62DAB426 9B1B499E 35932DAC 239EE27E
6000000: B386527C E8CAC680 6AA06340 8E041CEC   E51836 FBA90814 5FFF6A22 2B469481
6000020: 542CB93A 262EFF02 ED38D3D2 9933F6EB 8D9E84C6 C79AE572 700CCB69 2097F464
6000040: 63C0AD83 503D7B00 70E1CF9B 62FA2E30 5E5E7771 E5D9EE14 B8C56714 2011CE7A
6000060: 7E5DC339 5BB9732E 1223BFA3 5844B5CD 3AA38B2D 3117E51D 35D53CF2 26759487
6000080: 18AABB89 9C800C78 4548DD96 E6A8833D 12C4CC64 E4567430 596306BD E3B3C21A
60000A0: F94FD83B B4F04005 2550E677 31529D9C 5EE83FD A5DAFEB2 568B58CB 380F2902
60000C0: 8468D893 CDBC40FE EFD658A ED416E94 25041C27 A1FDEC4C A92E2AC9 4AA45A37
60000E0: BBA463B1 64B8D1C2 B17727E1 54998746 9E2FD10F 4ACD721B C15B0F10 8F877B0A
---- block7 ptr=30000000 is_malloc=0 length=0x100 ----
2FFFFFC0: 2AB01448 6E60026 40078400 938031C0 506000D0 1B7812E8 4B4049A 20D80DB
2FFFFFE0: 250E540D 9C074E01 154029B0 BC0E720 EA10B42F E065A00F D01EE0BE 1E20E78D
30000000: 8909C373 E4F136FE E08FDBFE FE228CC7 8070E025 A0C3459A 1EFFF8BA 3D5C84BA
30000020: 78402EEC BFA59B88 7F2A9F7F AAEC5CFD 756E5D84 AEB72A42 C5C04AA0 3F70A465
30000040: 119A0F84 2169306 46D00693 65A0458B 2FA65A9D 596BE88E A7C07627 EFF13CE9
30000060: 1DF7338E 2C429381 11402FA0 15E033B2 48D03FCE 64F0859B 4930EA4C E40194CB
30000080: CF44E62D BBF6CD4C 2CF476C2 7826F014 EC33B171 9010EFFD 293F4C6B 3085CD30
300000A0: 19E2F023 82B03013 67C70B3A 18F24930 C01268C 1B218863 81AE5AEC 87B7C47E
300000C0: 78F6A946 4B2DC0F1 FDA33509 D81C5CBC C6841F9A B9FC67E9 346EB2C4 CF64D224
300000E0: F2D3151D 1F8CA869 349E5F9C 4937C3A2 917F891 2F379CC7 C89685BD 7AD0AFA6
---- block8 ptr=D000000 is_malloc=0 length=0x100 ----
CFFFFC0:        0        0        0        0        0        0        0        0
CFFFFE0:        0        0        0        0        0        0        0        0
D000000:        0        0        0        0        0        0        0        0
D000020:        0        0        0        0        0        0        0        0
D000040:        0        0        0        0        0        0        0        0
D000060:        0        0        0        0        0        0        0        0
D000080:        0        0        0        0        0        0        0        0
D0000A0:        0        0        0        0        0        0        0        0
D0000C0:        0        0        0        0        0        0        0        0
D0000E0:        0        0        0        0        0        0        0        0
---- block9 ptr=31340000 is_malloc=0 length=0x100 ----
3133FFC0:        0        0        0        0        0        0        0        0
3133FFE0:        0        0        0        0        0        0        0        0
31340000:        0        0        0        0        0        0        0        0
31340020:        0        0        0        0        0        0        0        0
31340040:        0        0        0        0        0        0        0        0
31340060:        0        0        0        0        0        0        0        0
31340080:        0        0        0        0        0        0        0        0
313400A0:        0        0        0        0        0        0        0        0
313400C0:        0        0        0        0        0        0        0        0
313400E0:        0        0        0        0        0        0        0        0
---- block10 ptr=33B5631C is_malloc=0 length=0x100 ----
33B562DC:        0        0        0        0        0        0        0        0
33B562FC:        0        0        0        0        0        0        0        0
33B5631C:        0        0        0        0        0        0        0        0
33B5633C:        0        0        0        0        0        0        0        0
33B5635C:        0        0        0        0        0        0        0        0
33B5637C:        0        0        0        0        0        0        0        0
33B5639C:        0        0        0        0        0        0        0        0
33B563BC:        0        0        0        0        0        0        0        0
33B563DC:        0        0        0        0        0        0        0        0
33B563FC:        0        0        0        0        0        0        0        0
---- block11 ptr=3490401C is_malloc=0 length=0x100 ----
34903FDC:        0        0        0        0        0        0        0        0
34903FFC:        0        0        0        0        0        0        0        0
3490401C:        0        0        0        0        0        0        0        0
3490403C:        0        0        0        0        0        0        0        0
3490405C:        0        0        0        0        0        0        0        0
3490407C:        0        0        0        0        0        0        0        0
3490409C:        0        0        0        0        0        0        0        0
349040BC:        0        0        0        0        0        0        0        0
349040DC:        0        0        0        0        0        0        0        0
349040FC:        0        0        0        0        0        0        0        0
---- block12 ptr=515505C is_malloc=0 length=0x100 ----
515501C: 6E202564 20737461 7475733D 4558545F 4E45575F 564C414E        0 A446561
515503C: 6C6C6F63 61746520 65787420 766C616E 20256400 45787420 566C616E 20444220
515505C: 496E6974        0 6578745F 766C616E 5F676574 5F766C61 6E5F696E 666F0000
515507C: 564C414E 25303475        0        0        0        0        0        0
515509C:        0 A767470 5F676574 5F747275 6E6B5F69 6E666F20 6174746D 65707465
51550BC: 64206F6E 20747275 6E6B2030 7825782C 206E6F74 20666F75 6E642069 6E207472
51550DC: 756E6B20 6C697374        0        0        0        0        0        0
51550FC:        0 A767470 5F766C61 6E5F6368 616E6765 5F6E6F74 69666963 6174696F
515511C: 6E3A204D 4F444946 49454420 564C414E 20282564 2920444F 45534E27 54204558
515513C: 49535421 21210000        0        0        0        0        0        0
---- block13 ptr=1C1F0F70 is_malloc=0 length=0x100 ----
1C1F0F30: 1C1F0F0C 1C1EE5E0        0        0        0        0        0        0
1C1F0F50:        0        0        0        0 15A3C78B        1 288C988 1C1EE8B8
1C1F0F70:        0 1000001 1C1F25ED      301 2861A94        0 1000000        0
1C1F0F90: 1C1F0F28 1C1F0F70 1C1EE5E0        0        0        0        0        0
1C1F0FB0:        0        0        0        0        0        0 FD0110DF AB1234CD
1C1F0FD0: FFFE0000

EEM syslog filters

Similar Messages

Maybe you are looking for