Screen OS

Hello,

perhaps somebody can give me a hint... We have an SSG-140 in place.

Current ScreenOS version is 6.3.0r10.0, but we had the problem with the previous version 6.2.0 too.

At some point in time, the logs started flooding with tons of messages like the below:

2011-12-30 15:50:23    notif    Session (id 47687 src-ip 10.121.42.121 dst-ip 66.209.60.86 dst port 1598) route is valid.
2011-12-30 15:50:23    notif    Session (id 48024 src-ip 10.121.42.121 dst-ip 60.24.228.203 dst port 63720) route is valid.
2011-12-30 15:50:23    notif    Session (id 47979 src-ip 10.121.42.26 dst-ip 77.250.94.48 dst port 443) route is valid.
2011-12-30 15:50:23    notif    Session (id 48027 src-ip 212.23.138.194 dst-ip 94.221.237.140 dst port 17615) route is valid.
2011-12-30 15:50:23    notif    Session (id 47965 src-ip 212.23.138.194 dst-ip 88.152.255.18 dst port 4500) route is valid.

Such messages show in the logs many times per second. We don't have another symptom, the device works OK, but it is impossible to see any other messages in the logs because of that!

Can somebody give us a hint, how to stop these messages from showing?

Thanks a lot!

I was told that this is behavior as desgined in newer versions of ScreenOS.  When the device renews a route or flushes the routing table for some reason, the first flow that hits each route will generate that message.

I agree it's irritating and it fills up the log files, and JTAC gave me a command that I can use to shut that logging off, but I don't have it handy.  I'm sure one of the JTAC members here can assist.

Hi,

I would not ignore these messages. The routing interface may be flapping...

I want to ignore these messages,how to stop these messages from showing?

 KB20937 cannot be access .please help me !

thanks a lot !

Hello John, this one did the trick:

set log exclude-id 1 event-type 625