Cisco Cisco ASA 5580 Adaptive Security Appliance Leaflet

思科 ASA 系列命令参考，S 命令

第 3 章      show as-path-access-list 至 show auto-update 命令

Recommendation:

    Analyze your network traffic to determine the reason behind the high rate of ARP 

packets.

 Syslogs:

    322002, 322003 

----------------------------------------------------------------

Name: punt-no-mem

Punt no memory:

    This counter is incremented and the packet is dropped when there is no memory to 

create data structure for punting a packet to Control Point.

Recommendation:

    No action needs to be taken if this condition is transient.If this condition persists 

due to low memory, then system upgrade might be necessary.

Syslogs:

    None

----------------------------------------------------------------

Name: punt-queue-limit

Punt queue limit exceeded:

    This counter is incremented and the packet is dropped when punt queue limit is 

exceeded, an indication that a bottle-neck is forming at Control Point.

Recommendation:

    No action needs to be taken.This is a design limitation.

Syslogs:

    None

----------------------------------------------------------------

Name: flow-being-freed

Flow is being freed:

    This counter is incremented when the flow is being freed and all packets queued for 

inspection are dropped.

Recommendation:

    No action needs to be taken.

Syslogs:

    None

----------------------------------------------------------------

Name: invalid-encap

Invalid Encapsulation:

    This counter is incremented when the security appliance receives a frame belonging to 

an unsupported link-level protocol or if the L3type specified in the frame is not 

supported by the appliance.The packet is dropped.

Recommendation:

    Verify that directly connected hosts have proper link-level protocol settings.

Syslogs:

    None.

----------------------------------------------------------------