Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

CSS Late data arrival for KAL-index

What is meant when a CSS 11503 in Box2Box redundancy shows the following messages when doing a sh log:

21 AUG 15:54:09 1/1 4691207 NETMAN-7: SSL-KAL: Late data arrival for KAL-index (

11)

21 AUG 15:54:11 1/1 4691208 NETMAN-7: SSL-KAL: Late data arrival for KAL-index (

6)

Gi 1/1 is the Interface for the HA-Link.

The Software version used is sg0750103 (07.50.1.03)

Regards

Gerhard

2 ACCEPTED SOLUTIONS

Accepted Solutions
New Member

Re: CSS Late data arrival for KAL-index

This message was logged because you are using a kal type of SSL with the server hello coming back in multiple packets. The kal is only looking for the server hello in the first packet. Once it is received the CSS will reset the connection, even if there are more packets to follow. The message just indicates that data was received after the kal attempt was completed.

You dont need to worry about it its a debug level informational message. You can get rid of this message by lowering down the debug level to 4.

Syed Iftekhar Ahmed

Cisco Employee

Re: CSS Late data arrival for KAL-index

Gerhard,

these are debug messages.

If you are not troubleshooting any issue, I would recommend to set the logging level back to warning-4.

For the message, it refers to KAL - keepalive.

If you do a 'show keepalive' on your css, you will see that each KAL as an index.

From your log message, it appears that the response from the server for kal index 11 & 6 arrived after the CSS kal timeout or closed the connection.

You can see if those server are bouncing up/down and maybe sniff the traffic to verify that everything is ok.

Gilles.

4 REPLIES
New Member

Re: CSS Late data arrival for KAL-index

This message was logged because you are using a kal type of SSL with the server hello coming back in multiple packets. The kal is only looking for the server hello in the first packet. Once it is received the CSS will reset the connection, even if there are more packets to follow. The message just indicates that data was received after the kal attempt was completed.

You dont need to worry about it its a debug level informational message. You can get rid of this message by lowering down the debug level to 4.

Syed Iftekhar Ahmed

New Member

Re: CSS Late data arrival for KAL-index

Hello Mr. Syed Iftekhar Ahmed,

Thank you for the feedback, all ok now when switching back to logging level 4.

Regards

Gerhard

Cisco Employee

Re: CSS Late data arrival for KAL-index

Gerhard,

these are debug messages.

If you are not troubleshooting any issue, I would recommend to set the logging level back to warning-4.

For the message, it refers to KAL - keepalive.

If you do a 'show keepalive' on your css, you will see that each KAL as an index.

From your log message, it appears that the response from the server for kal index 11 & 6 arrived after the CSS kal timeout or closed the connection.

You can see if those server are bouncing up/down and maybe sniff the traffic to verify that everything is ok.

Gilles.

New Member

Re: CSS Late data arrival for KAL-index

Hello Gilles,

Thank you very much for your response, now it is clear what caused that messages.

I set the logging level for subsystem netman back to 4.

Regards and many thanks

Gerhard

284
Views
0
Helpful
4
Replies
CreatePlease to create content