Filter
Top Products
C-25
Cisco Intrusion Prevention System CLI Sensor Configuration Guide for IPS 7.1
OL-19892-01
Appendix C Troubleshooting
Troubleshooting the Appliance
Tip Before troubleshooting the appliance, check the Caveats section of the Readme for the software
version you have installed on your sensor to see if you are dealing with a known issue.
The Appliance and Jumbo Packet Frame Size
For IPS standalone appliances with 1 G and 10 G fixed or add-on interfaces, the maximum jumbo frame
size is 9216 bytes.
Note A jumbo frame is an Ethernet packet that is larger than the standard maximum of 1518 bytes (including
Layer 2 header and FCS).
Troubleshooting Loose Connections
Perform the following actions to troubleshoot loose connections on sensors:
• Make sure all power cords are securely connected.
• Make sure all cables are properly aligned and securely connected for all external and internal
components.
• Remove and check all data and power cables for damage. Make sure no cables have bent pins or
damaged connectors.
• Make sure each device is properly seated.
• If a device has latches, make sure they are completely closed and locked.
• Check any interlock or interconnect indicators that indicate a component is not connected properly.
• If problems continue, remove and reinstall each device, checking the connectors and sockets for bent
pins or other damage.
The Analysis Engine is Busy
After you reimage a sensor, the Analysis Engine is busy rebuilding Regex tables and does not respond
to new configurations. You can check whether the Analysis Engine is busy by using the show statistics
virtual-sensor command. You receive the following error message if the Analysis Engine is busy:
sensor# show statistics virtual-sensor
Error: getVirtualSensorStatistics : Analysis Engine is busy rebuilding regex tables. This
may take a while.
sensor#
When the Analysis Engine is busy rebuilding Regex tables, you receive an error message if you try to
update a configuration, for example, enabling or retiring a signature:
sensor# configure terminal
sensor(config)# service sig sig0
sensor(config-sig)# sig 2000 0
sensor(config-sig-sig)# status enabled
sensor(config-sig-sig)# status
sensor(config-sig-sig-sta)# enabled true
sensor(config-sig-sig-sta)# retired false