Description

In certain Junos OS versions on SRX platforms, a software defect may cause the system to generate a core dump when interface configuration changes are performed. This behavior is tied to internal processing during configuration commits and is not expected under normal operation

Symptoms

  • A core file (core dump) is generated after modifying interface configuration (for example, adding/removing interfaces or changing parameters).
  • Unexpected process crash messages in logs (e.g., /var/log/messages).
  • Possible temporary disruption in data-plane or control-plane processes depending on impact scope.
  • Increased concern during routine configuration changes or maintenance windows.

This issue is typically seen during configuration commit or interface-related updates, even if the configuration itself is valid.

Solution

Permanent Fix

  • Upgrade to a Junos OS release where PR1699578 is resolved. 
  • This issue is listed as fixed in multiple newer releases 

Workaround:

Disable the tcp sequence check.
set security flow tcp-session no-sequence-check

To selectively disable the tcp sequence check please refer to following KB.
https://supportportal.juniper.net/s/article/SRX-How-to-selectively-disable-syn-and-sequence-checking?language=en_US

 



Modification History
article created