Bug ID 655470: IP Intelligence logging publisher removal can cause tmm crash

Last Modified: Nov 07, 2022

Bug Tracker

Affected Product:  See more info
BIG-IP AFM(all modules)

Known Affected Versions:
12.1.0, 12.1.0 HF1, 12.1.0 HF2, 12.1.1, 12.1.1 HF1, 12.1.1 HF2, 12.1.2, 12.1.2 HF1, 12.1.2 HF2, 13.0.0, 13.0.0 HF1, 13.0.0 HF2, 13.0.0 HF3, 13.0.1

Fixed In:
13.1.0, 12.1.3

Opened: Apr 05, 2017
Severity: 2-Critical
Related Article:
K79924625

Symptoms

TMM restart immediately after removing global ip-intelligence logging publisher.

Impact

Traffic disrupted while tmm restarts. This is an intermittent, timing-related issue. Note: Because deleting the global ip-intelligence logging configuration publisher is uncommon, and might occur once, at setup, this issue is unlikely to manifest.

Conditions

1) Global IP Intelligence logging enabled. 2) While new incoming connections are handled by the system, delete the global logging publisher using the following command: modify security log profile global-network ip-intelligence { log-publisher none }

Workaround

There is no workaround, other than to not delete the ip-intelligence global logging publisher when heavy traffic is being handled.

Fix Information

Error handling now checks for NULL publisher and prevents the TMM restart.

Behavior Change