ErrSystemError-ct-sensorApp.463 not responding on ASA-SSM-10

Hello,
I got following error message when login into IPS over IDM, after error is displayed IDM is closing.
errSystemError-ct-sensorApp.463 not responding, please check system processes
- The connect to the specified Io::ClientPipe failed.
SSH login works, when using CLI following health statistics are available:
sensor# show health
Overall Health Status                                               Red
Health Status for Failed Applications                         Red
Health Status for Signature Updates                         Yellow
Health Status for License Key Expiration                   Green
Health Status for Running in Bypass Mode                Red
Health Status for Interfaces Being Down                   Green
Health Status for the Inspection Load                      Green
Health Status for the Time Since Last Event Retrieval   Green
Health Status for the Number of Missed Packets          Green
Health Status for the Memory Usage                      Not Enabled
Health Status for Global Correlation                    Green
Health Status for Network Participation                 Not Enabled
Security Status for Virtual Sensor sensor-int    Green
Security Status for Virtual Sensor vs0           Green
Do you have any idea why IPS crashed ?
ASA-SSM-10 is installed into ASA 5510.

Hello,
I have the sem problem since sveral days, I found the following workaround on our environement. Working since 5hours.
Hope it helps.
Regards.
IDSM-2 Sensor Module - errSystemError -ct-sensorApp.XXX not responding, please check system processes - The connect to the specified Io::ClientPipe failed.
Symptom:
When attempting to access an IDSM-2 sensor via its GUI (IDM) or via IME (IPS Manager Express), an error such as the following is encountered:
"errSystemError -ct-sensorApp.XXX not responding, please check system processes - The connect to the specified Io::ClientPipe failed."
Additionally, review of the 'show version' command output indicates the AnalysisEngine (sensorApp process) to be "Not Running".
Conditions:
IDSM-2 sensor module running 7.0(x) software release. Global Correlation Inspection feature enabled (On). A 'show tech' command output includes a sensorApp process core containing lines similar to the following:
cat /usr/cids/idsRoot/core/sensorApp/core.txt
/usr/cids/idsRoot/bin/sensorApp(_ZN3Cid3Rep9RepIpData13ApplyIpUpdateEPKcPNS0_8RepScoreE+)
Solution:
This problem is tracked as defect CSCti79423. It can be encountered on the IDSM-2 platform when a Global Correlation Update occurs. A fix for this is currently planned for inclusion in the next 7.0 release (7.0(6)).
In the interim, the only workaround to ensure that the sensor does not re-encounter this defect is to disable Global Correlation Inspection (Updates) as such:
sensor# conf t
sensor(config)# service global-correlation
sensor(config-glo)# global-correlation-inspection off
sensor(config-glo)# exit
Apply Changes?[yes]: yes
After making the above configuration change, a reboot of the affected IDSM-2 sensor module should restore it to service:
sensor# reset

Similar Messages

  • Cisco IPS Error -- errsystemerror-ct-sensorapp.333 not responding

    Hi Team,
    I am getting the below error while accessing IDM. I rebooted the device, after some times i get the same type of messages..
    error connecting to sensor + failed to load sensor. errsystemerror-ct-sensorapp.333 not responding. please check system processes- the connect to the specified lo::clientpipe failed.
    Will be appreciated for the quick reply on priority...
    regards
    Rajesh

    Hi,
    Pls find the below show version..
    Looks like all the processes are running..
    Application Partition:
    Cisco Intrusion Prevention System, Version 5.1(5)E1
    Host:
    Realm Keys key1.0
    Signature Definition:
    Signature Update S323.0 2008-03-24
    Virus Update V1.2 2005-11-24
    OS Version: 2.4.26-IDS-smp-bigphys
    Platform: IPS-4240-K9
    Serial Number: xxxxxxxxxxxx
    Licensed, expires: 01-Dec-2009 UTC
    Sensor up-time is 14:55.
    Using 512040960 out of 1454153728 bytes of available memory (35% usage)
    system is using 17.4M out of 29.0M bytes of available disk space (60% usage)
    application-data is using 44.1M out of 166.8M bytes of available disk space (28%
    usage)
    boot is using 35.3M out of 68.6M bytes of available disk space (54% usage)
    MainApp 2007_FEB_02_15_58 (Release) 2007-02-02T16:04:00-0600 Runn
    ing
    AnalysisEngine 2007_FEB_02_15_58 (Release) 2007-02-02T16:04:00-0600 Runn
    ing
    CLI 2007_FEB_02_15_58 (Release) 2007-02-02T16:04:00-0600
    Upgrade History:
    * IPS-K9-sp-5.1-5-E1 10:28:00 UTC Fri Feb 02 2007
    IPS-sig-S323-req-E1.pkg 07:26:42 UTC Tue Mar 25 2008
    Recovery Partition Version 1.1 - 5.1(5)E1

  • Cisco ips 4200 - errsystemerror-ct-sensorapp.443 not responding

    Hi team,
    Does anyone have come across the below error while accessing the cisco ips 4200 running with 7.0 version. The Gui closes automatically after this message.
    errsystemerror-ct-sensorapp.443 not responding, clientpipe failed.
    regards()

    Problem resolved by rebooting the device.. It is documented in cisco.
    http://www.cisco.com/en/US/products/hw/vpndevc/ps4077/products_qanda_item09186a008025c533.shtml
    When I attempt to log in to IPS, I receive this error message:
    errSystemError-ct-sensorAPP.450 not responding, clientpipe failed
    . How can I resolve this error?
    A. In order to resolve this error, use the reset command in order to reboot the IPS.
    Rate of this was helpful...

  • Error: getAnalysisEngineStatistics:ct-sensorApp.26277 not responding

    One of my customers has  IPS-4240-K9   and facing issue with follwing error
    Output from show statistics analysis-engine
    Error: getAnalysisEngineStatistics : ct-sensorApp.26277 not responding, please check system processes - The connect to the specified Io::ClientPipe failed.
    Output from show statistics anomaly-detection
    Error: getAnomalyDetectionStatistics : ct-sensorApp.26277 not responding, please check system processes - The connect to the specified Io::ClientPipe failed.
    Analysis Engine is working fine as you can see under show version
    MainApp            B-BEAU_2009_OCT_15_08_07_7_0_1_111   (Ipsbuild)   2009-10-15T08:09:06-0500   Running 
    AnalysisEngine     BE-BEAU_E4_2010_MAR_25_02_09_7_0_2   (Ipsbuild)   2010-03-25T02:11:05-0500   Running 
    CollaborationApp   B-BEAU_2009_OCT_15_08_07_7_0_1_111   (Ipsbuild)   2009-10-15T08:09:06-0500   Running 
    CLI                B-BEAU_2009_OCT_15_08_07_7_0_1_111   (Ipsbuild)   2009-10-15T08:09:06-0500         
    Can please someone help me to analysis the error.
    Look forward for response.
    Reagrds 

    Please find attached core.txt and version is
    Output from show version
    Application Partition:
    Cisco Intrusion Prevention System, Version 7.0(2)E4
    Host:                                                       
    OS Version:             2.4.30-IDS-smp-bigphys               
    Platform:               IPS-4240-K9                         
    Sensor up-time is 355 days.
    Using 1482727424 out of 1984548864 bytes of available memory (74% usage)
    Upgrade History:
      IPS-sig-S492-req-E4.pkg   00:01:02 UTC Sun Jun 06 2010 
    Recovery Partition Version 1.1 - 7.0(2)E3
    Look forward for your quick response.

  • No AutoUpdate feature working on ASA-SSM-20

    Hi!
    Autoupdate feature is not working on ASA-SSM-20 module.
    We have configure:
    https://www.cisco.com//cgi-bin/front.x/ida/locator/locator.pl
    And/Or:
    https://198.133.219.25//cgi-bin/front.x/ida/locator/locator.pl
    And/Or:
    https://www.cisco.com/cgi-bin/front.x/ida/locator/locator.pl
    And/Or:
    https://198.133.219.25//cgi-bin/front.x/ida/locator/locator.pl
    We get this errors on the ASA-SSM-20 module:
    evError: eventId=1280563964539644086  vendor=Cisco  severity=error 
      originator:  
        hostId: sensor1 
        appName: mainApp 
        appInstanceId: 356 
      time: nov 17, 2010 08:15:45 UTC  offset=60  timeZone=GMT+01:00 
      errorMessage: AutoUpdate exception: Receive HTTP response failed [3,212]  name=errSystemError
    evError: eventId=1280563964539644079  vendor=Cisco  severity=error 
      originator:  
        hostId: sensor1 
        appName: mainApp 
        appInstanceId: 356 
      time: nov 17, 2010 08:10:02 UTC  offset=60  timeZone=GMT+01:00 
      errorMessage: http error response: 400  name=errSystemError
    Any Ideas?

    I am experiencing a similar issue currently with a new SSC-5 module.  I am working with TAC, however reposne has been slow.  I can see traffic with Wireshark for 198.133.219.25 but I never see the traffic for 198.133.219.243 that I was told to allow on the firewall.  I also found it confusing that I need to create exceptions on the firewall for outbound traffic to these two IP addresses when I do not have to make any exceptions for any other outbound traffic.
    /* Style Definitions */
    table.MsoNormalTable
    {mso-style-name:"Table Normal";
    mso-tstyle-rowband-size:0;
    mso-tstyle-colband-size:0;
    mso-style-noshow:yes;
    mso-style-priority:99;
    mso-style-parent:"";
    mso-padding-alt:0in 5.4pt 0in 5.4pt;
    mso-para-margin:0in;
    mso-para-margin-bottom:.0001pt;
    mso-pagination:widow-orphan;
    font-size:11.0pt;
    font-family:"Calibri","sans-serif";
    mso-ascii-font-family:Calibri;
    mso-ascii-theme-font:minor-latin;
    mso-hansi-font-family:Calibri;
    mso-hansi-theme-font:minor-latin;
    mso-bidi-font-family:"Times New Roman";
    mso-bidi-theme-font:minor-bidi;}
    /* Style Definitions */
    table.MsoNormalTable
    {mso-style-name:"Table Normal";
    mso-tstyle-rowband-size:0;
    mso-tstyle-colband-size:0;
    mso-style-noshow:yes;
    mso-style-priority:99;
    mso-style-parent:"";
    mso-padding-alt:0in 5.4pt 0in 5.4pt;
    mso-para-margin:0in;
    mso-para-margin-bottom:.0001pt;
    mso-pagination:widow-orphan;
    font-size:11.0pt;
    font-family:"Calibri","sans-serif";
    mso-ascii-font-family:Calibri;
    mso-ascii-theme-font:minor-latin;
    mso-hansi-font-family:Calibri;
    mso-hansi-theme-font:minor-latin;
    mso-bidi-font-family:"Times New Roman";
    mso-bidi-theme-font:minor-bidi;}
    Here is what I see:
    IPS_Sensor# show stat host
    /* Style Definitions */
    table.MsoNormalTable
    {mso-style-name:"Table Normal";
    mso-tstyle-rowband-size:0;
    mso-tstyle-colband-size:0;
    mso-style-noshow:yes;
    mso-style-priority:99;
    mso-style-parent:"";
    mso-padding-alt:0in 5.4pt 0in 5.4pt;
    mso-para-margin:0in;
    mso-para-margin-bottom:.0001pt;
    mso-pagination:widow-orphan;
    font-size:11.0pt;
    font-family:"Calibri","sans-serif";
    mso-ascii-font-family:Calibri;
    mso-ascii-theme-font:minor-latin;
    mso-hansi-font-family:Calibri;
    mso-hansi-theme-font:minor-latin;
    mso-bidi-font-family:"Times New Roman";
    mso-bidi-theme-font:minor-bidi;}
    Auto Update Statistics
       lastDirectoryReadAttempt = 09:03:09 GMT-06:00 Wed Jan 19 2011
        =   Read directory: https://198.133.219.25//cgi-bin/front.x/ida/locator/locator.pl
        =   Error: AutoUpdate exception: HTTP connection failed [1,110]
       lastDownloadAttempt = N/A
       lastInstallAttempt = N/A
       nextAttempt = 11:00:00 GMT-06:00 Wed Jan 19 2011 Auxilliary Processors Installed
    IPS_Sensor# show clock
    .09:24:05 GMT-06:00 Wed Jan 19 2011
    I know this thread is a few months old, but am hoping to spark an interest here.
    Thanks.

  • ASA-SSC-AIP-5 Analysis Engine Not Responding

    Every couple of days I have been noticing that the IPS is in bypass mode and the Analysis Engine Status is often shown as not responding or is still loading something, and naturally, the CPU is pegged at 100%... so I have been reloading the IPS when this happens.
    2 Questions:
    Any general pointers of what often causes this, or things that I should look for when this is happening?  I know I did not give enough details for specific answers, but I am just looking for general ideas to start with.
    More importantly, what syslog messages might show up in the logs when the IPS goes into Bypass mode?  I'd like to setup a notification for these syslog messages so that I can troubleshoot immediately and determine the cause.
    IPS Version 6.2(2)E4
    Signature Version 559.0
    Cisco Adaptive Security Appliance Software Version 8.3(2)13
    Thanks.

    I would suggest that you upgrade the AIP-5 software to the latest version: 6.2.3(E4).
    Here is the release notes where a number of memory related bugs have been resolved:
    http://www.cisco.com/web/software/282549758/38029/IPS-6_2-3-E4_readme.txt
    You might also want to check if the AIP-5 module is overloaded with traffic, which can cause that issue.

  • (06 Oct 14) updated firefox and Kaspersky, now have problems with Barclays site - firefox "not responding" and plugin error on trying to close. Help!

    Updated Kaspersky to 15.0.0.463(a) - ( comes with "safe money" - now turned off).
    Updated Firefox from (old) version to 32.0.3.
    Barclays bank site loads properly, and allows access to accounts BUT when I try to look at a statement, Firefox "not responding" and a blank/ unresponsive page is displayed.
    In order to acheive any movement I have to close firefox... this gives rise to windows wanting to send error data, and Firefox apologising for loosing the tab.
    None of which allows me to do essential banking transactions.
    It is this machine that has the problem - I can access without problems via work computer (using google Chrome)

    My guess is that your statement is a PDF document, since banks and other companies often use that format for statements.
    Firefox has various options for viewing PDFs, including a built-in PDF viewer (not as full featured as Adobe's), or the option to use a plugin such as Adobe Acrobat, or to launch the PDF in an external application. This article describes how to experiment with that setting: [[How to disable the built-in PDF viewer and use another viewer]].
    On another subject, your plugin list has various plugins described as "Google Chrome Extension". I haven't seen that before. Could you review the list and see whether they really should be active in Firefox or can be deactivated?
    Open the Add-ons page using either:
    * Ctrl+Shift+a
    * "3-bar" menu button (or Tools menu) > Add-ons
    In the left column, click Plugins.
    For those that are not essential, I suggest changing them to "Never Activate". This might not take effect immediately in that window, but should disable them in new windows.

  • I can't open firefox the running but not responding window opens and says to close the existing window. I can't do that shutting down the computer doesn't do anything to help. I've done all the suggestions here. I've uninstalled and reinstalled firefox

    Firefox will not open. I get the firefox is already running but not responding window... I have tried rebooting with no help. I have tried to end the process via cntrl+shift+esc and nothing firefox is listed to end. I have tried find the app data via the run icon in the start up window, I have no run icon on this system (Acer with windows vista(?)
    == This happened ==
    Every time Firefox opened
    == The computer was hard shut down and did a improper shut down scan when it was restarted ==
    == User Agent ==
    Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; FunWebProducts; GTB6.5; SLCC1; .NET CLR 2.0.50727; Media Center PC 5.0; .NET CLR 3.5.30729; .NET CLR 3.0.30729)

    I am having a similar problem. Running Xp.
    Latest revision of firefox.
    After using firefox for a while if I exit, parent.lock is locked and i have to reboot to reload firefox.
    I have killed all firefox applications from task manager (usually there are none). and I have tried 3 different "file unlock" programs including unlocker to no avail.
    I also recently installed a program that shows -all- open files, and parent.lock is not listed, and thus not closable/unlockable from there.

  • Frequently when I open Firefox it says Firefox is already running but is not responding. I have to go to the task manager, find Firefox and close the process before I can get firefox to load.

    Those are all the details I have

    There is an article about this problem see:
    * [[Firefox is already running but is not responding]]

  • PCI DIO 32HS (6533) Suddenly giving "The device is not responding to the first IRQ level" error, and no longer functioning.

    Greetings NI folks,
      I'm an oceanographer, and have an sidescan sonar data aquasition computer running Windows XP SP2, and NiDAQ 7.0 (Legacy). For several years, this machine has worked flawlessly, but today, I booted it up to test the system for an upcoming job, and I got some strange errors in our sonar program. I tranced the problem to our NI-6533 PCI-DIO-32HS card. I launched NI Automation Explorer to test that the card was responsive, and when I click the "test panel", I get an error: "The device is not responding to the first IRQ level." Continue (yes/no). If I click yes, I can test the digital i/o's, but nothing happens, and all the tests fail (nonresponsive). I tried moving the card to another PCI slot, tried forcing it to have a specific IRQ that was unused by anything else, and finally tried moving it to another computer that had never been used with the DIO card. I'm still getting the error, and the card is nonresponsive. I'm at the limit of my abilities, and would like to know if there's anything else I can do, or should we send the card back to NI for repair/diagnosis.
    Thanks.

    Duplicate Post
    Best Regards
    Hani R.
    Applications Engineer
    National Instruments

  • IPod not recognized by iTunes. Also iPod seems disabled/locked showing  "do not disconnect". Not responding to anything. Any help please.

    My iPod is not being recognized by iTunes. iPod seems disabled and not responding to anything. Permanently on "do not disconnect". Not sure what to do.

    Hello,
    My iPod is not being recognized by iTunes or internet
    explorer. It used to, but not anymore. It just
    dosent show up when I connect it to my computer.
    Also, the "do no disconnect" sign does not appear on
    my iPod when I connect it. It is still able to
    recharge, though.
    have u tried a different usb port?
    I read that I have to restore it. I have tons of
    songs in my iPod that I do NOT want erased! How can
    I back these songs up? I have some songs on my iPod
    that are from another person's computer, so if they
    get erased, the songs are gone forever.
    try this http://www.copypod.net/
    Nano 4GB black|Moto RAZR V3 black| PSP| all kinds of cases for nano|radio/remote   Windows XP   <img src="http://i36.photobucket.com/albums/e13/superman5656/c.jpg" ="right"

  • I just updated itunes to 11.1.3 on my laptop and now it won't open. It does not respond to trying "safe mode" either.

    I just updated itunes to 11.1.3 on my laptop and now it won't open. It does not respond to trying "safe mode" either. Anyone have an idea as to what to do?

    I just uninstalled it and am waiting for it to reinstall. I sincerely hope that I have not lost everything that I worked on so hard. Now that mobile me is gone, I have not been able to go between devices to transfer things. I was merely trying to take a document I had worked on and open it in pages, but it said my version was too old. When I updated, it wouldn't load. Now I cannot do anything. I hope that the reinstall fixes it without losing everything. Please advise!!! Yes, I am in panic mode.

  • "Update server not responding" when trying to update Acrobat 9 Pro

    I just installed Acrobat 9 Pro on my desktop computer and on my laptop. I was able to download and install the latest updates to the copy on my desktop computer (so that it is now version 9.3.0), using Help>Check for Updates.
    When I try the same command on my laptop, I get and error message that states "The update server is not responding, which means it may be offline at the moment, or the Internet or firlewall settings may be incorrect. Please try again later." I tried several times yesterday and today with the same error. The message pops up immediatley; it doesn't even seem to actually try to connect.
    I disabled my firewall and antivirus software and still get the same result. I uninstalled then reinstalled Acrobat and still get the same result.
    I looked online at Adobe.com to see about downloading and installing the updates manually, but it's difficult for me to tell which updates I need. Some are for other languages and some are for 64-bit but I have Windows 7 32-bit.
    A call to tech support was no help. The agent seemed to think because I installed verison 9.0 that I only needed the one English update listed on the download page under 9.0, and not any of the later updates. . . And he said that Adobe recommends manually installing updates from Adobe.com rather than using the Check for Updates command (?!).
    Anyway, does anyone know what might be causing this problem with the adobe updater? Maybe I need to reinstall the updater (where do I find it?).
    OR
    Can someone tell me which of the updates listed on the Acrobat dowload page I should manually install to bring my product up to date?
    [Running Windows 7 32-bit on both machines]
    Thanks.

    Hi,
    Which version of Acrobat do you have ?
    (Launch Acrobat and Go to Acrobat->About Adobe Acrobat menu item and check the version )
    Also, can you ping following urls ?
    armmf.adobe.com
    armdl.adobe.com
    ardownload.adobe.com
    Are these urls reachable ?
    Also, you can check the contents of host file /etc/defaults/host to see that none of the ips are redirected.
    One more thing that you could try:
    If you have firewall on, could you please disable the firewall and then try the update. Does it works now ?

  • Adobe Reader 11 w/Windows 7 not responding

    Why does Adobe Reader 11 fail to respond sometimes?  Re-installing allows it to function several times then we get a "not responding" message.  A plank screen is displayed and the number of pages but NO text!  Using repair produces the same results.  Upon 1st use of the repaired/reinstalled reader 11 we also get the adobe message "Cannot find or create the font "Times New Roman".  Some characters may ot display or print correctly".  The text is mostly displayed at this point.  The second attempt to display the same PDF or another displays completely w/out any error message at all.  At some point during the testing process Adobe Reader 11 stops working!  Restarts don't help.  Shutdowns don't help.  Seems only a re-install or repair allows us to correctly view our PDF document a number of times before we have to repeat the process.  Is help available?

    Moved the discussion from Adobe Reader Touch for Windows 8 to Adobe Reader.

  • Apps "not responding" and general lag

    More than ever it seems apps are freezing and then the message that the app "not responding" comes up and do we want to wait or close. Is there any fix ? Also, my phone still has lag which is possibly uncurable ?  Sony making no friends here - a kitkat upgrade would be welcome but isn't coming ! One thing I did do was disable Chrome and install CM browser for android - makes searching less painful and would recommend.

     You could reinstall the latest update with PCC Keep in mind that apps are getting heavier and hardware demanding, chrome its known to have an issue at the moment, memory leak, and the Xperia SP has only 1GB of RAM not an ideal combination with this latest updates on apps. 

Maybe you are looking for

  • Need to display the Current Quarter Data

    Hi Gurus, We have a requirement in the report as follows: I have a Key Figure - 0Balance. In this it should display the current quarter data. We have 5 plants and this report is specific to a plant X which runs 3 month behind. So in the variables scr

  • ITUNES UPGRADE HELP

    I'm trying to download the new itunes 10.6.3 but it's saying that the update cannot be saved because the digital signature on the update is missing or invalid. the update may have been tampered with since being signed by Apple. HELP

  • IPhone calendar colors not there

    I updated my iPhone to 2.0 and had colors on the day view in calendar. Had syncing problems and once resolved, I have no colors at all, only gray scale. Any suggestions or am I just missing a setting somewhere?

  • Help Printing from Windows 7 to shared printer on Tiger/Mac Mini

    UGH! My folks have long been running on a Power PC Mac Mini with Tiger. The Mac has an Epson Stylus CX4200 - works great in this configuration. Unfortunately, we have a need to implement a laptop with Windows 7 running. I'd like to print to the Mac's

  • How to import updated version of APEX app without losing saved IR's?

    Oracle XE 11.2 Apex 4.1 Linux Red Hat 5.4 ============ Does anyone have suggestions on how to import updated version of APEX app without losing saved IR's? Also, I want to maintain app id from update to update (from revision to revision). In fact, I