Strange Syslog-Message since 10.4R3

[packermann]

We have updated our SRX650-cluster last week and so far it runs very smooth and stable. Also syslog-messages are down near to zero. I have only notice of kernel sync and nearly at the same time the following Error:

In dfwd_ev_client_timer_connect - Function 'dfwd_ev_client_start_retry_timer(session)' returned error 1.

Is this something to worry about?

[Automate]

See http://forums.juniper.net/t5/SRX-Services-Gateway/SRX-Branch-NSM-Logging-High-CPU/m-p/78866

[psadineni · Accepted solution]

These messages do not have any sevice imapct.  This fix  will be avilable in 10.4R4/10.4R5.
When ppmd fails to connect to dfwd, these messages are seen.dfwd does not run in srx platforms.

~psan

[msheikoh]

The fix didnt make into 10.4R4, how ever it is fixed in 10.4R5, 11.2R1,11.1R2 and 11.3R1

Thanks

Salman Sheikoh

[clibby@clinictec.com]

Hi,

I'm running 10.4r4.5 and see the message still. Are we sure this has been fixed in this release.  SRX201H.

Cole

[stine]

you forgot to mention "high volume" when describing this error.   These are from an EX4200.

Jun 15 18:14:35  test-fw ppmd[1046]: In dfwd_ev_client_timer_connect - Function 'dfwd_ev_client_start_retry_timer(session)' returned error 1.
Jun 15 18:14:41  test-fw ppmd[1046]: In dfwd_ev_client_timer_connect - Function 'dfwd_ev_client_start_retry_timer(session)' returned error 1.
Jun 15 18:16:41  test-fw last message repeated 20 times
Jun 15 18:26:42  test-fw last message repeated 100 times
Jun 15 18:36:42  test-fw last message repeated 100 times


can individual processes (ppmd) or log entries be disabled?   If not, what class/severity must I stop logging to be rid of these?

[pk]

Hi

Can be disabled with

file messages {
    any any;
    authorization info;
    match "!dfwd_ev_client_timer_connect";
}

[cryptochrome]

---

msheikoh wrote:

The fix didnt make into 10.4R4, how ever it is fixed in 10.4R5, 11.2R1,11.1R2 and 11.3R1

Thanks

Salman Sheikoh

---

Haha. Good joke there. Juniper still recommends 10.4 and 11.2 as well as 11.3 haven't even been released. Slowly but surely I am loosing ALL my faith in the SRX. They are a true shame for Juniper.

[stine]

Thanks.  It didn't occur to me to use the negate operator.....

[stine]

Unfortunately, it's not an SRX problem, but a JUNOS problem as it also happens on EX4200 hardware.