C-23
Cisco Intrusion Prevention System Sensor CLI Configuration Guide for IPS 7.2
OL-29168-01
Appendix C Troubleshooting
Troubleshooting the Appliance
•
Make sure each device is properly seated.
•
If a device has latches, make sure they are completely closed and locked.
•
Check any interlock or interconnect indicators that indicate a component is not connected properly.
•
If problems continue, remove and reinstall each device, checking the connectors and sockets for bent
pins or other damage.
The Analysis Engine is Busy
After you reimage a sensor, the Analysis Engine is busy rebuilding Regex tables and does not respond
to new configurations. You can check whether the Analysis Engine is busy by using the show statistics
virtual-sensor command. You receive the following error message if the Analysis Engine is busy:
sensor# show statistics virtual-sensor
Error: getVirtualSensorStatistics : Analysis Engine is busy rebuilding regex tables. This
may take a while.
sensor#
When the Analysis Engine is busy rebuilding Regex tables, you receive an error message if you try to
update a configuration, for example, enabling or retiring a signature:
sensor# configure terminal
sensor(config)# service sig sig0
sensor(config-sig)# sig 2000 0
sensor(config-sig-sig)# status enabled
sensor(config-sig-sig)# status
sensor(config-sig-sig-sta)# enabled true
sensor(config-sig-sig-sta)# retired false
sensor(config-sig-sig-sta)# exit
sensor(config-sig-sig)# exit
sensor(config-sig)# exit
Apply Changes?[yes]:
Error: editConfigDeltaSignatureDefinition : Analysis Engine is busy rebuilding regex
tables. This may take a while.
The configuration changes failed validation, no changes were applied.
Would you like to return to edit mode to correct the errors? [yes]: no
No changes were made to the configuration.
sensor(config)#
If you try to get the virtual sensor statistics immediately after you boot a sensor, you receive an error
message. Although the sensor has rebuilt the cache files, the virtual sensor is not finished initializing.
sensor# show statistics virtual-sensor
Error: getVirtualSensorStatistics : Analysis Engine is busy.
sensor#
When you receive the errors that the Analysis Engi ne is busy, wait a while before trying to make
configuration changes. Use the show statistics virtual-sensor command to find out when the Analysis
Engine is available again.
Communication Problems
This section helps you troubleshoot communication problems with the 4200 series sensor. It contains the
following topics:
•
Cannot Access the Sensor CLI Through Telnet or SSH, page C-24
•
Correcting a Misconfigured Access List, page C-26