IBM Support

IJ10158: QRADAR NETWORK INSIGHTS (QNI) DECAPPER 'OUT OF MEMORY' INSTANCES CAUSED BY MULTIPLE INSPECTOR COMPONENTS

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as program error.

Error description

  • It has been identified that the following QRadar Network
    Insights (QNI) inspector components can cause QNI decapper
    service Out of Memory instances and a coredump file to be
    generated in /store/jheap on the QNI appliance:
    SMTP inspector
    DHCP inspector
    DNS inspector
    Oracle inspector
    HTTP inspector
    QQMail Inspector
    SMB inspector
    SIP inspector
    MySQL Inspector
    QNI cannot process flow traffic as expected while the decapper
    service is not running.
    

Local fix

  • No workaround available.
    

Problem summary

  • This issue was fixed in QRadar QRM QVM release of 731 patch 6
    interimfix 01.
    

Problem conclusion

  • This issue was fixed in QRadar QRM QVM release of 731 patch 6
    interimfix 01.
    

Temporary fix

Comments

APAR Information

  • APAR number

    IJ10158

  • Reported component name

    QR INCIDENT FOR

  • Reported component ID

    5725QIFSW

  • Reported release

    731

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2018-10-05

  • Closed date

    2018-10-09

  • Last modified date

    2018-10-09

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Fix information

  • Fixed component name

    QR INCIDENT FOR

  • Fixed component ID

    5725QIFSW

Applicable component levels

  • R731 PSY

       UP

[{"Business Unit":{"code":"BU048","label":"IBM Software"}, "Product":{"code":"SS6E69","label":"IBM QRadar Network Insights"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"731","Edition":""},{"Business Unit":{"code":"BU048","label":"IBM Software"}, "Product":{"code":"SSUK44","label":"IBM Security QRadar Incident Forensics"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"731","Edition":""}]

Document Information

Modified date:
09 October 2018