Hi Team,
We have faced our GP not working 26/07/2021 around 09:15 pm.
After the firewall restarts its started to work. When I analyzing TSF I got the ssl vpn below error.
"The PID for this process changed indicating it was restarted"
2021-07-26 21:17:33.573 +0530 --- processes Total num processes: 39 Name PID CPU% FDs Open Virt Mem Res+Swap State pppoe 6001 0 7 446520 20016 S ha_agent 5996 0 8 239832 20068 S satd 5997 0 12 562120 34656 S l2ctrl 5995 0 8 519156 20820 S dp-console 4299 0 5 21992 4392 S varrcvr 5994 0 23 1534596 82580 S ifmgr 5993 0 4 237052 17088 S sysd 3857 0 99 187704 36868 S redis_useridd 5760 0 8 33296 7240 S ehmon 4294 0 5 83704 4716 S devsrvr 5622 0 13 2732368 1339364 S ikemgr 5989 0 13 609956 61652 S crypto 4630 0 10 730896 26964 S cdb 6194 0 18 1099916 43756 S monitor 3956 0 15 153212 19924 R dhcp 5999 0 7 515448 19136 S cord 5621 0 33 624816 65752 S ha-sshd 4660 0 5 42140 2272 S sysdagent 3967 0 8 1129676 20064 S masterd 3837 0 19 294204 31156 S routed 6002 0 17 994664 58952 S web_backend 5986 0 13 527908 24548 S sshd 4686 0 5 42140 2388 S useridd 5629 0 32 698860 252228 S chasd 4298 0 8 588732 13764 S dnsproxy 6000 0 16 653280 81832 S dagger 3955 0 10 539484 41452 S keymgr 5992 0 11 682268 31968 S authd 6003 0 14 570328 74056 S logrcvr 5990 6 307 2001560 820476 S sslmgr 5998 0 14 1478160 85064 S rasmgr 5991 0 10 750052 64876 S websrvr 8607 0 14 375696 18360 S snmpd 8284 0 15 282912 22996 S sslvpn_ngx 10669 0 17 386160 15288 S dp0-path_monitor 12177 0 6 125204 12436 S mgmtsrvr 7683 0 56 2189968 619856 S l3svc 3642 0 14 375000 29340 S sslvpn 25296 0 23 437836 45356 S agetty 3845 0 3 17660 916 S
Totals 6 925 25516476 4194636
PAN-OS version 9.1.8
Please help me with this for what is the reason caused.
Regards,
Vishnu
The process exited but without a core, so there was no crash but still a reason for the system to cycle the service Probably best if you reach out to TAC
Hi Reaper,
Please find the show system files output below.
/var/cores/:
total 4.0K
drwxr-xr-x 2 root root 4.0K Apr 18 11:01 crashinfo
/var/cores/crashinfo:
total 0
/opt/dpfs/var/cores/:
total 4.0K
drwxr-xr-x 2 root root 4.0K Apr 18 11:03 crashinfo
/opt/dpfs/var/cores/crashinfo:
total 0
/opt/panlogs/cores/:
total 4.0K
drwxrwxrwx 2 root root 4.0K Jul 27 06:51 crashinfo
/opt/panlogs/cores/crashinfo:
total 0
Also I checked mastered logs I getting below output,
2021-07-26 21:15:28.761 +0530 INFO: sslvpn: exited, Core: False, Exit code: 0
2021-07-26 21:15:29.086 +0530 INFO: sslvpn: process running with pid 25296
See if there's any core files '> show system files' that could indicate the process crashed. This would need to be investigated by TAC