Cisco Cisco ASA 5580 Adaptive Security Appliance Leaflet

思科 ASA 系列命令参考，S 命令

第 3 章      show as-path-access-list 至 show auto-update 命令

Name: cxsc-bad-tlv-received 

CXSC Module requested drop:

This counter is incremented and the packet is dropped as requested by the CXSC module 

when the packet has bad TLVs.

Recommendations:

Check syslogs and alerts on the CXSC module.

Syslogs:

None

---------------------------------------------------------------- 

Name: cxsc-malformed-packet 

CXSC Module requested drop:

This counter is incremented and the packet is dropped as requested by the CXSC module 

when the packet is malformed.

Recommendations:

Check syslogs and alerts on the CXSC module.

Syslogs:

None

---------------------------------------------------------------- 

Name: cxsc-fail 

CXSC config removed for connection:

This counter is incremented and the packet is dropped when the CXSC configuration is 

not found for a particular connection.

Recommendations:

Check if any configuration changes have been made for CXSC.

Syslogs:

None 

---------------------------------------------------------------- 

Name: cxsc-ha-request 

CXSC HA replication drop:

This counter is incremented when the security appliance receives a CXSC HA request 

packet, but could not process it and the packet is dropped.

Recommendation:

This could happen occasionally when CXSC does not have the latest ASA HA state, such 

as right after an ASA HA state change.If the counter is constantly increasing however, it 

may be because CXSC and ASA are out of sync.If that happens, contact Cisco TAC for 

assistance.

Syslogs:

None.

---------------------------------------------------------------- 

Name: cxsc-invalid-encap 

CXSC invalid header drop:

This counter is incremented when the security appliance receives a CXSC packet with an 

invalid messsage header, and the packet is dropped.

Recommendation: This should not happen.Contact Cisco TAC for assistance.

Syslogs:

None.