Unable to clear user sessions. Is it due to EEM ?

seabird505 · ‎07-21-2010

Hi

Tthere are two user sessions (SSH) that are idle for more then 2 weeks. We cannot "clear" them but other new session (if any) can be cleared.

# clear line vty 1
[confirm]
[OK]

# show users

    Line       User       Host(s)              Idle       Location
   1 vty 0     USER1   idle                     2w1d 11.11.11.11
   2 vty 1     USER1   idle                     2w1d 11.11.11.11

......

Although disabled for about 10 days now, we were priviously running EEM script with one particular setting involving the above username. But the idle time for that user indicates it being there before EEM removal.

event manager session cli username USER1

We are getting this message twice every two seconds on this 6506 [Version 12.2(18)SXF15 FC1] core switche

Jul 21 23:00:29.581: %SYS-3-DUP_TIMER: Same tty1 in linewatch_timers, type 2
Jul 21 23:00:59.581: %SYS-3-DUP_TIMER: Same tty1 in linewatch_timers, type 2
Jul 21 23:01:29.581: %SYS-3-DUP_TIMER: Same tty1 in linewatch_timers, type 2
Jul 21 23:01:59.581: %SYS-3-DUP_TIMER: Same tty1 in linewatch_timers, type 2
Jul 21 23:02:29.581: %SYS-3-DUP_TIMER: Same tty1 in linewatch_timers, type 2
Jul 21 23:02:59.581: %SYS-3-DUP_TIMER: Same tty1 in linewatch_timers, type 2
Jul 21 23:03:29.585: %SYS-3-DUP_TIMER: Same tty1 in linewatch_timers, type 2

Googling for the error gives this info from Cisco:

Error Message

%SYS-3-DUP_TIMER : Same tty[t-line] in linewatch_timers, type [dec]

Explanation A tty appeared twice in a timer list where the tty should have appeared only once.

Recommended Action Copy the error message exactly as it appears on the console or in the system log, call your Cisco technical support representative, and provide the representative with the gathered information.

Are these log messages because of these user sessions? Why can't user sessions be cleared? Has EEM got anything to do with it ?

Thanks for your time.

Regards, Rashid.

Joe Clarke · ‎07-24-2010

No, these sessions are not EEM. Are you using SCP to copy files to/from this switch?

seabird505 · ‎07-25-2010

Yes, we do used SCP to backup config file to remote server.

How can we remove these sessions and stop the generation of log messages ?

Joe Clarke · ‎07-25-2010

Are you using any tclsh scripts on this device (note: these are not EEM scripts, but rather ones run using "tclsh")?

seabird505 · ‎07-28-2010

Thanks for reply Joseph !

No tclsh scripts were or are runnings on the box.

Joe Clarke · ‎07-29-2010

I can't find an exact bug which would cause your symtpoms. I see one which comes close related to failed SCP sessions, but it looks like that might have bee fixed in 12.2(18)SXF5. I recommend you open a TAC service request so more analysis can be done.