Cannot retrieve raw messages after upgrade

Unanswered Question
Sep 30th, 2008

Hi folks

I get the message "Cannot retrieve raw message" when I try to view a raw event. Same problem for both FWSM and IPS.

Most annoying since the enhanced functionality of this feature was one of the main reasons to upgrade from 4.3.6 in the first place. What I can find in the backend log is "RawmsgBufferReader: read end of the buffer, not find two separators". That doesn't tell me anything more than that it might be a bug.

Any ideas?



I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
irisrios Mon, 10/06/2008 - 11:06

This may be because of shared buffer raw message are not in temporary file or data pool.


This Discussion