IBM Support

IJ12108: NAPATECH SERVICE CAN FAIL WITH 'ADAPTER 0: ERROR DETECTED ON BONDING INTERFACE. NIF LBW ERROR = 0X4' IN MESSAGES

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as program error.

Error description

  • It has been identified that the napatech service can fail on
    QRadar Network Insights appliances with errors similar to the
    following in /var/log/messages:
    Nov 19 11:32:32 qni-lab-box ntservice[337540]: Adapter 1:
    Start: END
    Nov 19 11:32:32 qni-lab-box ntservice[337540]: Adapter 0:
    PostStart: BEGIN
    Nov 19 11:32:32 qni-lab-box ntservice[337540]: Adapter 1:
    Interface state machine started in Nt40e3p4_Mon1
    Nov 19 11:32:34 qni-lab-box ntservice[337540]: Adapter 0: PRBS
    test with bonded adapter 1 passed.
    Nov 19 11:32:34 qni-lab-box ntservice[337540]: Adapter 0:
    Bonded succesfully to adapter 1.
    Nov 19 11:32:34 qni-lab-box ntservice[337540]: Adapter 0:
    PostStart: END
    Nov 19 11:32:34 qni-lab-box ntservice[337540]: Adapter 1:
    PostStart: BEGIN
    Nov 19 11:32:34 qni-lab-box ntservice[337540]: Adapter 1:
    Bonded succesfully to adapter 0.
    Nov 19 11:32:34 qni-lab-box ntservice[337540]: Adapter 1:
    PostStart: END
    Nov 19 11:32:34 qni-lab-box ntservice[337540]: OS timesync
    thread running with default priority due to missing permission
    to set
    Nov 19 11:32:34 qni-lab-box ntservice[337540]: Executing NTPL
    file: /opt/napatech3/config/qni_ntconfig.ntpl
    Nov 19 11:32:34 qni-lab-box ntservice[337540]: NTPL CMD: # NTPL
    file generated by QRadar for host 127.0.0.1
    Nov 19 11:32:34 qni-lab-box ntservice[337540]: NTPL CMD:
    HashMode=Hash5TupleSorted
    Nov 19 11:32:35 qni-lab-box ntservice[337540]: NTPL CMD:
    Setup[NUMANode=0] = StreamID==(1..4)
    Nov 19 11:32:35 qni-lab-box ntservice[337540]: NTPL CMD:
    Setup[NUMANode=1] = StreamID==(5..8)
    Nov 19 11:32:35 qni-lab-box ntservice[337540]: NTPL CMD:
    Assign[StreamID=(1..4)] = Port==(0..3)
    Nov 19 11:32:35 qni-lab-box ntservice[337540]: NTPL CMD:
    Assign[StreamID=(5..8)] = Port==(4..7)
    Nov 19 11:32:35 qni-lab-box ntservice[337540]: NTPL CMD:
    IPFMode[StreamID=1; Timeout=1000; TablePersist=TimeoutOnly] =
    Port==(0
    Nov 19 11:32:35 qni-lab-box ntservice[337540]: NTPL CMD:
    IPFMode[StreamID=7; Timeout=1000; TablePersist=TimeoutOnly] =
    Port==(4
    Nov 19 11:32:35 qni-lab-box ntservice[337540]:
    ****************************************************************
    ****
    Nov 19 11:32:35 qni-lab-box ntservice[337540]: *
    NTService is now operational.                     *
    Nov 19 11:32:35 qni-lab-box ntservice[337540]:
    ****************************************************************
    ****
    Nov 19 11:32:35 qni-lab-box napatech3[337326]: Starting
    NTService (this may take a while)                  [Done]
    Nov 19 11:32:35 qni-lab-box systemd[1]: Started Napatech3 3GD
    Service.
    -- Subject: Unit napatech3.service has finished start-up
    -- Defined-By: systemd
    -- Support:
    http://lists.freedesktop.org/mailman/listinfo/systemd-devel
    --
    -- Unit napatech3.service has finished starting up.
    Nov 19 14:44:39 qni-lab-box ntservice[17362]: Adapter 0: Error
    detected on bonding interface. NIF LBW error = 0x4
    Nov 19 14:44:39 qni-lab-box ntservice[17362]: Adapter 0: Error
    detected on bonding interface. NIF status = 0x1f9
    Nov 19 14:44:39 qni-lab-box ntservice[17362]: Adapter 0: Error
    detected on bonding interface. NIF LBW error = 0x4
    Nov 19 14:44:40 qni-lab-box ntservice[17362]: Adapter 0: Error
    detected on bonding interface. NIF status = 0x1f9
    Nov 19 14:44:40 qni-lab-box ntservice[17362]: Adapter 0: Error
    detected on bonding interface. NIF LBW error = 0x4
    

Local fix

  • No workaround available.
    

Problem summary

  • This issue was fixed in QRadar QRM QVM release of 7.3.1 patch 8
    and 7.3.2 GA.
    

Problem conclusion

  • This issue was fixed in QRadar QRM QVM release of 7.3.1 patch 8
    and 7.3.2 GA.
    

Temporary fix

Comments

APAR Information

  • APAR number

    IJ12108

  • Reported component name

    QR INCIDENT FOR

  • Reported component ID

    5725QIFSW

  • Reported release

    731

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2018-12-11

  • Closed date

    2019-03-06

  • Last modified date

    2019-03-06

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Fix information

  • Fixed component name

    QR INCIDENT FOR

  • Fixed component ID

    5725QIFSW

Applicable component levels

  • R731 PSY

       UP

  • R732 PSY

       UP

[{"Business Unit":{"code":"BU048","label":"IBM Software"}, "Product":{"code":"SS6E69","label":"IBM QRadar Network Insights"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"731","Edition":""},{"Business Unit":{"code":"BU048","label":"IBM Software"}, "Product":{"code":"SSUK44","label":"IBM Security QRadar Incident Forensics"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"731","Edition":""}]

Document Information

Modified date:
06 March 2019