Cisco Cisco ASA 5580 Adaptive Security Appliance Leaflet
3-79
思科 ASA 系列命令参考,S 命令
第 3 章 show as-path-access-list 至 show auto-update 命令
show asp drop
Recommendation:
The device administrator can use the commands 'show resource usage' and 'show resource
usage system' to view context and system resource limits and 'Denied' counts and adjust
resource limits if desired.
Syslogs:
321002
----------------------------------------------------------------
Name: tcpmod-connect-clash
A TCP connect socket clashes with an existing listen connection.This is an internal system
error.Contact TAC.
----------------------------------------------------------------
Name: ssm-app-request
Flow terminated by service module:
This counter only applies to the ASA 5500 series adaptive security appliance.It is
incremented when the application running on the SSM requests the security appliance to
terminate a connection.
Recommendation:
You can obtain more information by querying the incident report or system messages
generated by the SSM itself.Please consult the documentation that comes with comes with
the SSM for instructions.
Syslogs:
None.
----------------------------------------------------------------
Name: ssm-app-fail
Service module failed:
This counter only applies to the ASA 5500 series adaptive security appliance.It is
incremented when a connection that is being inspected by the SSM is terminated because the
SSM has failed.
Recommendation:
The card manager process running in the security appliance control plane issued system
messages and CLI warning to inform you of the failure.Please consult the documentation
that comes with the SSM to trouble shoot the SSM failure.Contact Cisco Technical
Assistance Center (TAC) if needed.
Syslog:
421001.
----------------------------------------------------------------
Name: ssm-app-incompetent
Service module incompetent:
This counter only applies to the ASA 5500 series adaptive security appliance.It is
incremented when a connection is supposed to be inspected by the SSM, but the SSM is not
able to inspect it.This counter is reserved for future use.It should always be 0 in the
current release.
Recommendation:
None.
Syslog:
None.
----------------------------------------------------------------