VSTACK_ERR: smi_socket_recv_read_hdr:

CiscoNutt · ‎04-14-2015

Mar 3 18:59:51.926: VSTACK_ERR: smi_socket_recv_read_hdr:!!!Msg_hdr type is not matching with any predefined Could be an attack, closing connection
Mar 3 18:59:51.943: VSTACK_ERR: smi_socket_recv_read_hdr:!!!Msg_hdr type is not matching with any predefined Could be an attack, closing connection

Anyone know what might be causing this error? Not sure where to start looking.

Madhukrishnan Gopinathan Nair · ‎04-14-2015

Him

Where do you see this?

CiscoNutt · ‎04-15-2015

I see it in the logs of one of my routers...But I haven't seen any more of these logs since March 3rd.

Madhukrishnan Gopinathan Nair · ‎04-16-2015

Which platform

could you send me a show version.

CiscoNutt · ‎04-17-2015

I have seen it on the following platforms:

WS-C3750X-24

WS-C2960S-48LPS-L

WS-C2960S-48LPD-L

All had the same error message on the same date (march 3).

Madhukrishnan Gopinathan Nair · ‎04-17-2015

What is the code you are running on them.

sh ver

thanks,

Madhu.

CiscoNutt · ‎04-20-2015

WS-C3750X-24 - 12.2(53)SE2

WS-C2960S-48LPS-L - 12.2(53)SE2

WS-C2960S-48LPD-L - 12.2(53)SE2

Madhukrishnan Gopinathan Nair · ‎04-20-2015

Hello ,

This seems to be a bug (most likely to be

CSCtf79637 - 3750X -- VSTACK_ERR: smi_ibc_dl_handle_events : invalid messag ).

Please upgrade the code to 12.2(55)SE or higher.

Thanks,
Madhu.

*** rate this post if it useful***

Madhukrishnan Gopinathan Nair · ‎04-20-2015

Here is the link to the bug

https://tools.cisco.com/bugsearch/bug/CSCtf79637/?reffering_site=dumpcr