I have been getting the same thing also and have applied XPU 20.4. I have correlated low priority sensor info events to these userissue_1 events. The sensor info events state "signature attacks module being reloaded due to system resource constraints". This happened several times to a couple of my net sensors within 1 second apart of each other. I checked one of the crash.cap files that was generated and it appeared to be IM traffic. Wade Dauphinee
-----Original Message----- From: Christopher Wiley [mailto:[EMAIL PROTECTED]] Sent: Thursday, September 19, 2002 9:45 AM To: 'Ernest Lopez'; [EMAIL PROTECTED] Subject: RE: UserIssue_1 error Contents are Direct Alliance Corporation CONFIDENTIAL - I have been getting the same thing Christopher Wiley E-Commerce / Network Security Manager Direct Alliance Corporation Desk 480-446-2033 -----Original Message----- From: Ernest Lopez [mailto:[EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]> ] Sent: Wednesday, September 18, 2002 11:59 AM To: [EMAIL PROTECTED] Subject: UserIssue_1 error TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message to [EMAIL PROTECTED] Contact [EMAIL PROTECTED] for help with any problems! ---------------------------------------------------------------------------- All, We have recently been getting tons of errors like the following: Event: UserIssue_1 From: 0.0.0.0 To: 0.0.0.0 Info: alert0 - Sensor Internal Error alert1 - Contact ISS technical support alert2 - current packet in crash.cap Event: 0xc0000005 Can anyone tell me why this is happening? RS 7.0 Thanks, Ernest Contents are Direct Alliance Corporation CONFIDENTIAL -
