调用并行导出 threat-pcap API 时,Threat-pcap 下载失败,并显示错误“XXXX.pcap 不存在”。

调用并行导出 threat-pcap API 时,Threat-pcap 下载失败,并显示错误“XXXX.pcap 不存在”。

3791
Created On 06/17/24 00:04 AM - Last Modified 08/20/24 04:55 AM


Symptom


  • XML API 用于下载 Threat-pcap。
  • 下载失败,并显示 API 响应“XXXX.pcap 不存在。
  • 当并行调用下载的 API 时,会发生这种情况。
  • 当并行调用这些 API 时,用于下载 Threat-pcap 的 XML API 将类似于以下响应。
<?xml version="1.0"?>
<response status="error">
  <msg>
    <line>/opt/pancfg/session/pan/user_tmp/4814264219446509/1152921504606846976.pcap not present</line>
  </msg>
</response>


Environment


  • 下一代防火墙
  • PAN-OS:9.1、10.1、10.2、11.0、11.1
  • XML API


Cause


在当前实现中,用于下载 threat-pcap 的 XML API 无法并行运行。

Resolution


按顺序运行 XML API 以下载 threat-pcap。

 


Additional Information


如果req_stats.log具有相同的日志消息,这些日志消息是用于在 1 秒内下载 threat-pcap 的 XML API,则表明这些 XML API 可能被并行调用。
  • req_stats.log
2024-06-05 21:09:43.402 | 2024-06-05 21:09:43.402 | 2024-06-05 21:09:43.402 | 2024-06-05 21:09:44.082 | 0 | 0.00 msecs | 679.48 msecs | 9202 | <request cmd="op" cookie="9202659739653343" refresh="no"><operations xml="yes"><download><threat-extpcap><pcapid>1152921504606846976</pcapid><search-time>2024/06/04 21:49:05</search-time><device_name>PA-3410</device_name><sessionid>54</sessionid>

2024-06-05 21:09:44.313 | 2024-06-05 21:09:44.314 | 2024-06-05 21:09:44.313 | 2024-06-05 21:09:44.997 | 0 | 0.00 msecs | 684.20 msecs | 5151 | <request cmd="op" cookie="5151491533863496" refresh="no"><operations xml="yes"><download><threat-extpcap><pcapid>1152921504606846976</pcapid><search-time>2024/06/04 21:49:05</search-time><device_name>PA-3410</device_name><sessionid>55</sessionid>

2024-06-05 21:09:44.371 | 2024-06-05 21:09:44.371 | 2024-06-05 21:09:44.371 | 2024-06-05 21:09:45.063 | 0 | 0.00 msecs | 692.06 msecs | 6320 | <request cmd="op" cookie="6320397012768083" refresh="no"><operations xml="yes"><download><threat-extpcap><pcapid>1152921504606846976</pcapid><search-time>2024/06/04 21:50:25</search-time><device_name>PA-3410</device_name><sessionid>56</sessionid>


Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000TorfCAC&lang=zh_CN&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

Choose Language