Unable to clear user sessions. Is it due to EEM ?

Unanswered Question
Jul 21st, 2010

Hi

Tthere are two user sessions (SSH) that are idle for more then 2 weeks. We cannot "clear" them but other new session (if any) can be cleared.

# clear line vty 1
[confirm]
[OK]

# show users

    Line       User       Host(s)              Idle       Location
   1 vty 0     USER1   idle                     2w1d 11.11.11.11
   2 vty 1     USER1   idle                     2w1d 11.11.11.11

   ......

   ......

Although disabled for about 10 days now, we were priviously running EEM script with one particular setting involving the above username. But the idle time for that user indicates it being there before EEM removal.

event manager session cli username USER1

We are getting this message twice every two seconds on this 6506 [Version 12.2(18)SXF15  FC1] core switche

Jul 21 23:00:29.581: %SYS-3-DUP_TIMER: Same tty1 in linewatch_timers, type 2
Jul 21 23:00:59.581: %SYS-3-DUP_TIMER: Same tty1 in linewatch_timers, type 2
Jul 21 23:01:29.581: %SYS-3-DUP_TIMER: Same tty1 in linewatch_timers, type 2
Jul 21 23:01:59.581: %SYS-3-DUP_TIMER: Same tty1 in linewatch_timers, type 2
Jul 21 23:02:29.581: %SYS-3-DUP_TIMER: Same tty1 in linewatch_timers, type 2
Jul 21 23:02:59.581: %SYS-3-DUP_TIMER: Same tty1 in linewatch_timers, type 2
Jul 21 23:03:29.585: %SYS-3-DUP_TIMER: Same tty1 in linewatch_timers, type 2

Googling for the error gives this info from Cisco:

Error Message  

   %SYS-3-DUP_TIMER  : Same tty[t-line] in linewatch_timers, type [dec]

Explanation   A tty appeared twice in a  timer list where the tty should have appeared only once.

Recommended Action   Copy the error message  exactly as it appears on the console or in the system  log, call your Cisco technical support representative, and provide the  representative with the  gathered information.

Are these log messages because of these user sessions? Why can't user sessions be cleared? Has EEM got anything to do with it ?

Thanks for your time.

Regards, Rashid.

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
Joe Clarke Sat, 07/24/2010 - 20:52

No, these sessions are not EEM.  Are you using SCP to copy files to/from this switch?

seabird505 Sun, 07/25/2010 - 20:15

Yes, we do used SCP to backup config file to remote server.

How can we remove these sessions and stop the generation of log messages ?

Joe Clarke Sun, 07/25/2010 - 21:22

Are you using any tclsh scripts on this device (note: these are not EEM scripts, but rather ones run using "tclsh")?

seabird505 Wed, 07/28/2010 - 17:30

Thanks for reply Joseph !

No tclsh scripts were or are runnings on the box.

Joe Clarke Thu, 07/29/2010 - 20:59

I can't find an exact bug which would cause your symtpoms.  I see one which comes close related to failed SCP sessions, but it looks like that might have bee fixed in 12.2(18)SXF5.  I recommend you open a TAC service request so more analysis can be done.

Actions

This Discussion