Cisco Cisco ASA 5510 Adaptive Security Appliance Leaflet

Cisco ASA Series 명령 참조 , S 명령

3장      show as-path-access-list through show auto-update 명령              

    This counter will increment when the RTP payload type field does not contain an audio 

payload type when the signalling channel negotiated an audio media type for this RTP 

secondary connection. The counter increments similarly for the video payload type.

Recommendation:

    The RTP source in your network is using the audio RTP secondary connection to send 

video  or vice versa. If you wish to prevent this you can deny the host using ACLs.

Syslogs:

    431001.

----------------------------------------------------------------

Name: inspect-rtp-ssrc-mismatch

Invalid RTP Synchronization Source field:

    This counter will increment when the RTP SSRC field in the packet does not match the 

SSRC which the inspect has been seeing from this RTP source in all the RTP packets.

Recommendation:

    This could be because the RTP source in your network is rebooting and hence changing 

the SSRC or it could be because of another host on your network trying to use the opened 

secondary RTP connections on the firewall to send RTP packets. This should be investigated 

further to confirm if there is a problem.

Syslogs:

    431001.

----------------------------------------------------------------

Name: inspect-rtp-sequence-num-outofrange

RTP Sequence number out of range:

    This counter will increment when the RTP sequence number in the packet is not in the 

range expected by the inspect.

Recommendation:

    No action is required because the inspect tries to recover and start tracking from a 

new sequence number after a lapse in the sequence numbers from the RTP source.

Syslogs:

    431001.

----------------------------------------------------------------

Name: inspect-rtp-max-outofseq-paks-probation

RTP out of sequence packets in probation period:

    This counter will increment when the out of sequence packets when the RTP source is 

being validated exceeds 20. During the probation period, the inspect looks for 5 

in-sequence packets to consider the source validated.

Recommendation:

    Check the RTP source to see why the first few packets do not come in sequence and 

correct it.

Syslogs:

    431001.

----------------------------------------------------------------

Name: inspect-rtcp-invalid-length

Invalid RTCP Packet length:

    This counter will increment when the UDP packet length is less than the size of the 

RTCP header.

Recommendation: