Connectrix Cisco: "Security alert:SRVNAME_RTD_MONITOR-2-SECURITY_ALERT: SECURITY-WARNING: ASLR ENTROPY INSUFFICIENT" received in logging log

Summary: This security alert is periodically seen in the show logging log output due to the memory randomization check failed.

This article applies to This article does not apply to This article is not tied to any specific product. Not all product versions are identified in this article.
Check out other resources

Symptoms

Error in the show logging log:
"%SRVNAME_RTD_MONITOR-2-SECURITY_ALERT: SECURITY-WARNING: ASLR ENTROPY INSUFFICIENT "  

 

Cause

  • The above message indicates a periodic memory randomization check failed.
  • When such checks fail, there is no impact to the production traffic.
  • If this message appears only once, it can be safely ignored.
  • If there is repetitive behavior, this switch needs attention.

Resolution

1. Check the output of the command: 
show security system state
Example:  
MDS9710-s1fA-sw1# show security system state
  XSPACE:
        Non-Executable stack    : Yes
        Non-Executable heap     : Yes
        Non-Writable text       : Yes
  ASLR:
        randomize_va_space      : 2 (Enabled)
        Randomization Self-test : Pass
        CVE-offset2lib Test     : Pass
        Randomization Entropy   : 8-19
            stack bits  : 19    heap bits       : 13
            text bits   : 8     bss bits        : 8
            data bits   : 8     anon map bits   : 9
            thread stack bits   : 9
  OSC:
        Version:                3.0.0
  SafeC:
        Version:                3.0.1a

2. Take a note of the Entropy range. 
3. Any range from 8-19 is considered "Good" and can be ignored.
4. Any range below 8 is bad and must involve Cisco TAC to verify the switch.

Affected Products

Connectrix MDS-Series Firmware, Connectrix MDS-Series Hardware
Article Properties
Article Number: 000212067
Article Type: Solution
Last Modified: 30 May 2025
Version:  3
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.