Last Modified: Aug 01, 2024
Affected Product(s):
F5OS F5OS, F5OS-A, Install/Upgrade
Known Affected Versions:
F5OS-A 1.5.0, F5OS-A 1.5.1
Fixed In:
F5OS-A 1.7.0, F5OS-A 1.5.2
Opened: May 16, 2023 Severity: 2-Critical
SELinux shared label set by identifier container for the common path shared across all the containers. This issue started when node-agent container was introduced without dependency. The system repeatedly logs this message to the platform log: tcpdumpd-manager[8]: priority="Crit" version=1.0 msgid=0x5406000000000018 msg="[] global_dmaa_comm init_comm failed ret:" this=0x17c6b50 ret=3. Attempting to run an F5OS tcpdump fails with the following error: appliance-1# system diagnostics tcpdump -nni 3.0 tcp running /usr/sbin/tcpdump -nnn "-nni" "3.0" "tcp" tcpdump: verbose output suppressed, use -v or -vv for full protocol decode listening on 3.0, link-type EN10MB (Ethernet), capture size 262144 bytes errbuf ERROR:INIT error, line-dma-agent init returned fatal status, packets cannot be captured tcpdump: pcap_loop: INIT error, line-dma-agent init returned fatal status, packets cannot be captured 0 packets captured 0 packets received by filter 0 packets dropped by kernel
Tcpdump capture fails.
This issue seems to occur when downgrading a system to an affected version.
This issue can be resolved by doing the following: 1. Log into the system as root 2. Edit /var/docker/config/platform.yml 3. Locate the configuration for 'tcpdumpd-manager', and replace the volume that reads: - /var/F5/system:/var/tcpdump:z with: - /var/F5/system:/var/tcpdump 4. Save the file 5. Reboot the appliance
Root cause of this issue was fixed as part of ID1326157.