- Cisco Network Router User's Manual

E-23
Cisco Intrusion Prevention System Appliance and Module Installation Guide for IPS 7.1
OL-24002-01
Appendix E Troubleshooting
Troubleshooting the Appliance
• Check any interlock or interconnect indicators that indicate a component is not connected properly.
• If problems continue, remove and reinstall each device, checking the connectors and sockets for bent
pins or other damage.
Analysis Engine is Busy
After you reimage a sensor, the Analysis Engine is busy rebuilding Regex tables and does not respond
to new configurations. You can check whether the Analysis Engine is busy by using the show statistics
virtual-sensor command. You receive the following error message if the Analysis Engine is busy:
sensor# show statistics virtual-sensor
Error: getVirtualSensorStatistics : Analysis Engine is busy rebuilding regex tables. This
may take a while.
sensor#
When the Analysis Engine is busy rebuilding Regex tables, you receive an error message if you try to
update a configuration, for example, enabling or retiring a signature:
sensor# configure terminal
sensor(config)# service sig sig0
sensor(config-sig)# sig 2000 0
sensor(config-sig-sig)# status enabled
sensor(config-sig-sig)# status
sensor(config-sig-sig-sta)# enabled true
sensor(config-sig-sig-sta)# retired false
sensor(config-sig-sig-sta)# exit
sensor(config-sig-sig)# exit
sensor(config-sig)# exit
Apply Changes?[yes]:
Error: editConfigDeltaSignatureDefinition : Analysis Engine is busy rebuilding regex
tables. This may take a while.
The configuration changes failed validation, no changes were applied.
Would you like to return to edit mode to correct the errors? [yes]: no
No changes were made to the configuration.
sensor(config)#
If you try to get the virtual sensor statistics immediately after you boot a sensor, you receive an error
message. Although the sensor has rebuilt the cache files, the virtual sensor is not finished initializing.
sensor# show statistics virtual-sensor
Error: getVirtualSensorStatistics : Analysis Engine is busy.
sensor#
When you receive the errors that the Analysis Engine is busy, wait a while before trying to make
configuration changes. Use the show statistics virtual-sensor command to find out when the Analysis
Engine is available again.
Communication Problems
This section helps you troubleshoot communication problems with the sensor. It contains the following
topics:
• Cannot Access the Sensor CLI Through Telnet or SSH, page E-24
• Correcting a Misconfigured Access List, page E-26
• Duplicate IP Address Shuts Interface Down, page E-26