05-22-2012 12:40 AM
Does some one know how to show systemlog? My firewall just restarted daytime for no reason my clients dropped their internal network and were not avaible to surf the internet for some minutes, it affected 5.000~ users :'(
I need to know what happend.. Is there any way to see the system log?
05-22-2012 12:42 AM
I can only see the system log at the Dashboard, but i whould like a longer one more informative
Found it Monitor > Logs > System
05-22-2012 12:51 AM
( description contains 'infra-group: restarts exhausted, rebooting system' )
What do this mean? restarts exhausted, rebooting system
( description contains 'Management server started. Running version 4.1.4' ) Started? I have not tunrned it off?
( description contains 'Dataplane is now up' ) Same here i did not turn it off?
What is happening to my firewall, why is it behaving so weird?
05-22-2012 01:23 AM
If im not mistaken PA has added autorestart of failed services at the mgmt-plane.
One such case (as example) was the failing SSL-termination in 2xxx models. With the autorestart of hung services the box could continue operate (with little loss of functions (only time between the process hung and that the process had been restarted again), compared to if the SSL-termination halts and you find out about this hours later).
I think that if a specific service have been forced to restart several times the PANOS will restart the whole mgmtplane instead, but this shouldnt affect the dataplane (the whole idea of separate mgmt- and dataplanes, except for the stuff thats handled by the mgmtplane like updating userid relations and issue the ssl-termination certs (which also is different in different models where this is taken care of)).
05-22-2012 01:27 AM
I hope any of these can help:
'infra-group: restarts exhausted, rebooting system' and Firewall REBOOTS random
https://live.paloaltonetworks.com/message/14634#14634
PAN-OS Software Buffer Leak, Issue ID 36829
https://live.paloaltonetworks.com/docs/DOC-2847
Critical Issues to be Addressed in Future PAN-OS Releases
https://live.paloaltonetworks.com/docs/DOC-1982
So this can happen either if the swap is runned out or by buffer leaks.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
