Cisco Cisco ASA 5580 Adaptive Security Appliance Leaflet

思科 ASA 系列命令参考，S 命令

第 3 章      show as-path-access-list 至 show auto-update 命令

----------------------------------------------------------------

Name: tcp-syn-ooo

TCP SYN on established conn:

    This counter is incremented and the packet is dropped when appliance receives a TCP 

SYN packet on an established TCP connection.

Recommendations:

    None

Syslogs:

    None

----------------------------------------------------------------

Name: tcp-synack-ooo

TCP SYNACK on established conn:

    This counter is incremented and the packet is dropped when appliance receives a TCP 

SYN-ACK packet on an established TCP connection.

Recommendations:

    None

Syslogs:

    None

----------------------------------------------------------------

Name: tcp-seq-past-win

TCP packet SEQ past window:

    This counter is incremented and the packet is dropped when appliance receives a TCP 

data packet with sequence number beyond the window allowed by the peer TCP endpoint.

Recommendations:

    None

Syslogs:

    None

----------------------------------------------------------------

Name: tcp-invalid-ack

TCP invalid ACK:

    This counter is incremented and the packet is dropped when appliance receives a TCP 

packet with acknowledgment number greater than data sent by peer TCP endpoint.

Recommendations:

    None

Syslogs:

    None

----------------------------------------------------------------

Name: tcp-fo-drop

TCP replicated flow pak drop:

    This counter is incremented and the packet is dropped when appliance receives a TCP 

packet with control flag like SYN, FIN or RST on an established connection just after the 

appliance has taken over as active unit.

Recommendations:

    None