AnalysisEngine version 4.1-3

[darin.marais]

After a few hours of the sensor running the AnalysisEngine dies. Why does this happen?

Application Partition:

Cisco Systems Intrusion Detection Sensor, Version 4.1(3)S87

OS Version 2.4.18-5smpbigphys

Platform: IDS-4250-SX

Sensor up-time is 2:57.

Using 558637056 out of 1980493824 bytes of available memory (28% usage)

Using 962M out of 15G bytes of available disk space (7% usage)

MainApp 2003_Oct_10_11.16 (Release) 2003-10-10T11:01:13-0500 Running

AnalysisEngine 2003_Oct_10_11.16 (Release) 2003-10-10T11:01:13-0500 NotRunning

Authentication 2003_Oct_10_11.16 (Release) 2003-10-10T11:01:13-0500 Running

Logger 2003_Oct_10_11.16 (Release) 2003-10-10T11:01:13-0500 Running

NetworkAccess 2003_Oct_10_11.16 (Release) 2003-10-10T11:01:13-0500 Running

TransactionSource 2003_Oct_10_11.16 (Release) 2003-10-10T11:01:13-0500 Running

WebServer 2003_Oct_10_11.16 (Release) 2003-10-10T11:01:13-0500 Running

CLI 2003_Oct_10_11.16 (Release) 2003-10-10T11:01:13-0500

Upgrade History:

* IDS-sig-4.1-3-S86 09:43:59 UTC Thu Apr 22 2004

IDS-sig-4.1-3-S87.rpm.pkg 09:11:17 UTC Fri Apr 23 2004

Recovery Partition Version 1.2 - 4.1(1)S47

[astuckey]

Contact the TAC and open a case. This is not normal behavior, and Cisco will work with you to debug it.

[klwiley]

There have been several bugs found in the 4.1(3) release that could cause this issue. Please apply the 4.1(3e) patch found at:

http://www.cisco.com/cgi-bin/tablebuild.pl/nids

If you continue to experience problems let us know.