Cisco Cisco ASA 5580 Adaptive Security Appliance Leaflet

思科 ASA 系列命令参考，S 命令

第 3 章      show as-path-access-list 至 show auto-update 命令

Name: ssl-record-decrypt-error

SSL record decryption failed:

    This counter is incremented when a decryption error occurs during SSL data 

receive.This usually means that there is a bug in the SSL code of the ASA or peer, or an 

attacker may be modifying the data stream.The SSL connection has been closed.

Recommendation:

    Investigate the SSL data streams to and from your ASA.If there is no attacker, then 

this indicates a software error that should be reported to the Cisco TAC.

Syslogs:

    None.

----------------------------------------------------------------

Name: np-socket-conn-not-accepted

A new socket connection was not accepted:

    This counter is incremented for each new socket connection that is not accepted by the 

security appliance.

Recommendation:

    It is possible to see this counter increment as part of normal operation.However, if 

the counter is rapidly incrementing and there is a major malfunction of socket-based 

applications, then this may be caused by a software defect.Contact the Cisco TAC to 

investigate the issue further.

Syslog:

    None.

----------------------------------------------------------------

Name: np-socket-failure

NP socket failure:

    This is a general counter for critical socket processing errors.

Recommendation:

    This indicates that a software error should be reported to the Cisco TAC.

Syslog:

    None.

----------------------------------------------------------------

Name: np-socket-relay-failure

NP socket relay failure:

    This is a general counter for socket relay processing errors.

Recommendation:

    It is possible to see this counter increment as part of normal operation.However, if 

the counter is rapidly incrementing and there is a major malfunction of socket-based 

applications, then this may be caused by a software defect.Contact the Cisco TAC to 

investigate the issue further.

Syslog:

    None.

----------------------------------------------------------------

Name: np-socket-data-move-failure

NP socket data movement failure:

    This counter is incremented for socket data movement errors.

Recommendation:

    This indicates that a software error should be reported to the Cisco TAC.