Cisco Cisco ASA 5580 Adaptive Security Appliance Leaflet

Page of 1214
 
3-67
思科 ASA 系列命令参考,命令
 
 3       show as-path-access-list  show auto-update 命令
  show asp drop
 Recommendation:
    This indicates that a software error should be reported to the Cisco TAC.
 Syslogs:
    None
----------------------------------------------------------------
Name: vpn-lock-error
IPsec locking error:
  This counter is incremented when VPN flow cannot be created due to an internal locking 
error.
Recommendation:
    This condition should never be encountered during normal operation and may indicate a 
software problem with the appliance. Contact the Cisco Technical Assistance Center (TAC) 
if this error occurs.
Syslogs:
    None.
----------------------------------------------------------------
Name: out-of-memory
No memory to complete flow:
    This counter is incremented when the appliance is unable to create a flow because of 
insufficient memory.
Recommendation:
    Verify that the box is not under attack by checking the current connections.Also 
verify if the configured timeout values are too large resulting in idle flows residing in 
memory longer.Check the free memory available by issuing 'show memory'.If free memory is 
low, issue the command 'show processes memory' to determine which processes are utilizing 
most of the memory.
Syslogs:
    None
----------------------------------------------------------------
Name: parent-closed
Parent flow is closed:
    When the parent flow of a subordinating flow is closed, the subordinating flow is also 
closed.For example, an FTP data flow (subordinating flow) will be closed with this 
specific reason when its control flow (parent flow) is terminated.This reason is also 
given when a secondary flow (pin-hole) is closed by its controlling application.For 
example, when the BYE messaged is received, the SIP inspection engine (controlling 
application) will close the corresponding SIP RTP flows (secondary flow).
Recommendation:
    None.
Syslogs:
    None.
----------------------------------------------------------------
Name: closed-by-inspection
Flow closed by inspection:
    This reason is given for closing a flow due to an error detected during application 
inspection.For example, if an error is detected during inspecting an H323 message, the 
corresponding H323 flow is closed with this reason.