Sign In with your
Trend Micro Account
Need Help?
Need More Help?

Create a technical support case if you need further support.

Potential purple screen due to Deep Security and ESX timer-related stack overflow

    • Updated:
    • 15 Oct 2015
    • Product/Version:
    • Deep Security 7.5
    • Deep Security 8.0
    • Platform:
    • VMware ESX 5.0
Summary

Users encounter PSOD due to Deep Security and ESXi timer-related stack overflow.

 
Deep Security versions 7.5 SP4, 8.0 SP1 and newer releases have timers disabled by default and are not affected by this issue.
Details
Public

p>To resolve this issue, use the advanced setting for the Deep Security Filter Driver that controls whether or not the driver will multiplex a single kernel timer across all Virtual Machines.

These timers are used to perform minimal maintenance task on a default 30 second interval. These same tasks also take place periodically as the system processes packets. Thus, the tasks execute with or without a timer. Using a single timer across all VMs is complex to manage and appears to have created some stability issue that could result in ESXi host crash.

Since the tasks that the timers perform occur, Trend Micro recommends disabling the timer-based method using these steps:

  1. From the ESXi console, execute this command to find out the value that is configured for the Filter Driver heap memory size:

    % esxcfg-module -g dvfilter-dsa

    If the value for the "DSAFILTER_HEAP_MAX_SIZE" is adjusted from its default value then the outcome will be similar to:

    dvfilter-dsa enabled = 1 options = 'DSAFILTER_HEAP_MAX_SIZE=134217728'

  2. Use this command to disable timer and preserve the configured value for the DSAFILTER_HEAP_MAX_SIZE:

    % esxcfg-module -s "DSAFILTER_HEAP_MAX_SIZE= 134217728 DSAFILTER_MOD_TIMER_ENABLED=0" dvfilter-dsa

     
    Set the DSAFILTER_HEAP_MAX_SIZE to the value that was observed after running the "esxcfg-module -g dvfilter-dsa" command.

    If the value for the "DSAFILTER_HEAP_MAX_SIZE" is not changed from its default value then the outcome will be similar to:

    dvfilter-dsa enabled = 1 options = ' '

    In this case you can use the following command to disable timers:

    % esxcfg-module -s "DSAFILTER_MOD_TIMER_ENABLED=0" dvfilter-dsa

  3. Verify if the settings were successfully applied by executing this command:

    % esxcfg-module -g dvfilter-dsa

  4. Reboot the ESXi server for the changes to take effect.
     
    The setting will not take effect until the driver is reloaded. Reloading will require a reboot (best option) of ESXi or unloading/loading of the driver.
Premium
Internal
Rating:
Category:
Configure; Troubleshoot
Solution Id:
1060125
Feedback
Did this article help you?

Thank you for your feedback!

To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.

If you need additional help, you may try to contact the support team. Contact Support


To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.


Need More Help?

Create a technical support case if you need further support.