11-10-2008 10:18 PM
I have experianced a new issue in SSG140, it was suddenly restarted. Following are the logs kindly help and advice what happen to SSG140. Thanks
notif The physical state of interface ethernet0/1 has changed to Up.
2008-11-11 09:42:09info Rapid Deployment cannot start because gateway has undergone configuration changes.
2008-11-11 09:42:09notif System was reset at 2001-03-09 22:46:55 by netscreen
2008-11-11 09:42:09notif System is operational.
2008-11-11 09:42:01notif The physical state of interface ethernet0/2 has changed to Up.
2008-11-11 09:42:01notif The physical state of interface ethernet0/5 has changed to Up.
2008-11-11 09:42:01notif The physical state of interface ethernet0/3 has changed to Up.
2008-11-11 09:42:01notif The physical state of interface ethernet0/4 has changed to Up.
2008-11-11 09:41:58alert SCCP ALG enabled on the device.
2008-11-11 09:41:58alert SCCP ALG registered line break to tcp-proxy
Solved! Go to Solution.
11-10-2008 10:38 PM
these log messages captured before SSG got restarted?
if not can you please paste full log.
11-11-2008 01:49 AM
If you experienced a crash on the device, I would recommend opening a JTAC case and supplying a "get tech" together with "get log sys saved" in order to find the cause.
11-11-2008 03:11 AM
I got the "get tech" but i can not get "get log sys saved", i think logs are gone. kindly advise, thanks
11-11-2008 05:34 AM
If there is nothing in the "get log system saved" are you sure that the system crashed? When the firewall crashes, a snippet of the crash is almost always saved in the log. If the log is empty, that would indicate that the system did not crash. The eventlog contains:
notif System was reset at 2001-03-09 22:46:55 by netscreen
(you need to set the date and time on your firewall)
This means that it could've been reset by a user. For example, if I reset my firewall:
2008-11-11 21:29:28 system notif 00767 System was reset at 2008-11-11 21:28:
05 by netscreen
If there is nothing in the log, and you believe that this was a crash, then you need to hook a PC into the console port and leave it there. If there is another crash, then the full crash trace can be submitted to JTAC.
11-12-2008 09:19 PM
Thanks for the help, I really appriciate. Once again thanks.
With best regards
Sufyan Ali Shaikh
JNCIA-ER, JNCIA-EX, JNCIA-FWV, JNCIA-WX