Cisco Cisco ASA 5580 Adaptive Security Appliance Leaflet

思科 ASA 系列命令参考，S 命令

第 3 章      show as-path-access-list 至 show auto-update 命令

示例

以下是

 show asp table classify 命令的输出示例：

ciscoasa# show asp table classify

Interface test:

No.of aborted compiles for input action table 0x33b3d70: 29

in  id=0x36f3800, priority=10, domain=punt, deny=false

        hits=0, user_data=0x0, flags=0x0

        src ip=0.0.0.0, mask=0.0.0.0, port=0, tag=any

        dst ip=10.86.194.60, mask=255.255.255.255, port=0, tag=any

in  id=0x33d3508, priority=99, domain=inspect, deny=false

        hits=0, user_data=0x0, use_real_addr, flags=0x0

        src ip=0.0.0.0, mask=0.0.0.0, port=0, tag=any

        dst ip=0.0.0.0, mask=0.0.0.0, port=0, tag=any

in  id=0x33d3978, priority=99, domain=inspect, deny=false

        hits=0, user_data=0x0, use_real_addr, flags=0x0

        src ip=0.0.0.0, mask=0.0.0.0, port=53, tag=any

        dst ip=0.0.0.0, mask=0.0.0.0, port=0, tag=any

...

以下是

 show asp table classify hits 命令的输出示例，带有上次清除命中计数器的记录： 

Interface mgmt:

in id=0x494cd88, priority=210, domain=permit, deny=true 

hits=54, user_data=0x1, cs_id=0x0, reverse, flags=0x0, protocol=0 src ip=0.0.0.0, 

mask=0.0.0.0, port=0 dst ip=255.255.255.255, mask=255.255.255.255, port=0, 

dscp=0x0 

in id=0x494d1b8, priority=112, domain=permit, deny=false 

hits=1, user_data=0x0, cs_id=0x0, reverse, flags=0x0, protocol=1 src ip=0.0.0.0, 

mask=0.0.0.0, port=0 dst ip=0.0.0.0, mask=0.0.0.0, port=0, dscp=0x0 

Interface inside:

in id=0x48f1580, priority=210, domain=permit, deny=true 

hits=54, user_data=0x1, cs_id=0x0, reverse, flags=0x0, protocol=0 src ip=0.0.0.0, 

mask=0.0.0.0, port=0 dst ip=255.255.255.255, mask=255.255.255.255, port=0, 

dscp=0x0 

in id=0x48f09e0, priority=1, domain=permit, deny=false 

hits=101, user_data=0x0, cs_id=0x0, l3_type=0x608 src mac=0000.0000.0000, 

mask=0000.0000.0000 dst mac=0000.0000.0000, mask=0000.0000.0000 

Interface outside:

in id=0x48c0970, priority=210, domain=permit, deny=true 

hits=54, user_data=0x1, cs_id=0x0, reverse, flags=0x0, protocol=0 src ip=0.0.0.0, 

mask=0.0.0.0, port=0 dst ip=255.255.255.255, mask=255.255.255.255, port=0, dscp=0x0 

以下是

 show asp table classify hits 命令的输出示例，其中包括第 2 层信息：

Input Table

in  id=0x7fff2de10ae0, priority=120, domain=permit, deny=false

hits=4, user_data=0x0, cs_id=0x0, reverse, flags=0x0, protocol=1

src ip/id=0.0.0.0, mask=0.0.0.0, icmp-type=0

dst ip/id=0.0.0.0, mask=0.0.0.0, icmp-code=0, dscp=0x0

input_ifc=LAN-SEGMENT, output_ifc=identity in  id=0x7fff2de135c0, priority=0, 

domain=inspect-ip-options, deny=true

hits=41, user_data=0x0, cs_id=0x0, reverse, flags=0x0, protocol=0

src ip/id=0.0.0.0, mask=0.0.0.0, port=0

dst ip/id=0.0.0.0, mask=0.0.0.0, port=0, dscp=0x0

input_ifc=LAN-SEGMENT, output_ifc=any

.

.

.