Bug ID 438674: When log filters include tamd, tamd process may leak descriptors

Last Modified: Sep 13, 2023

Affected Product(s):
BIG-IP LTM(all modules)

Known Affected Versions:
11.5.1 HF1, 11.5.1 HF2, 11.5.1 HF3, 11.5.1 HF4, 11.5.1 HF5, 11.5.1 HF6, 11.5.1 HF7, 11.5.1 HF8, 11.5.1 HF9, 11.5.1 HF10, 11.5.1 HF11, 11.5.2 HF1, 11.5.3 HF1, 11.5.3 HF2, 11.5.4 HF1, 11.5.4 HF2, 11.5.4 HF3, 11.5.4 HF4, 11.3.0, 11.4.0, 11.4.1, 11.5.0, 11.5.1, 11.5.2, 11.6.0, 11.6.1, 11.6.2, 11.6.3, 11.6.3.1, 11.6.3.2, 11.6.3.3, 11.6.3.4, 11.6.4, 11.6.5, 11.6.5.1, 11.6.5.2, 11.6.5.3, 12.1.0 HF1, 12.1.0 HF2, 12.1.1 HF1, 12.1.1 HF2, 12.1.2 HF1, 12.1.2 HF2

Fixed In:
12.0.0, 11.6.0 HF6, 11.5.3, 11.4.1 HF9

Opened: Nov 21, 2013

Severity: 2-Critical

Related Article: K14873

Symptoms

The log filter functionality in TMOS allows users to publish logs from a specific set of processes to various log destinations.

Impact

Client authentication might fail. When a log filter includes tamd, the tamd process might start to leak descriptors.

Conditions

Configure log filter that includes tamd.

Workaround

Do not define log filters that include tamd (tamd is included in 'all').

Fix Information

The BIG-IP system no longer sends tamd log messages to the configured remote log destinations.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips