Cisco Cisco ASA 5510 Adaptive Security Appliance Leaflet

Page of 1264
 
3-40
Cisco ASA Series 명령 참조 , S 명령
  
3      show as-path-access-list through show auto-update 명령              
  show asp drop
Syslogs:
    None.
----------------------------------------------------------------
Name: invalid-app-length
Invalid App length:
    This counter will increment when the appliance detects an invalid length of the Layer 
7 payload in the packet. Currently, it counts the drops by the DNS Guard function only. 
Example: Incomplete DNS header.
Recommendation:
    No action required.
Syslogs:
    None.
----------------------------------------------------------------
Name: loopback-buffer-full
Loopback buffer full:
    This counter is incremented and the packet is dropped when packets are sent from one 
context of the appliance to another context through a shared interface and there is no 
buffer space in loopback queue.
Recommendations:
    Check system CPU to make sure it is not overloaded.
Syslogs:
    None
----------------------------------------------------------------
Name: non-ip-pkt-in-routed-mode
Non-IP packet received in routed mode:
    This counter will increment when the appliance receives a packet which is not IPv4, 
IPv6 or ARP and the appliance/context is configured for routed mode. In normal operation 
such packets should be dropped by the default L2 ACL configuration.
 Recommendation:
    This indicates that a software error should be reported to the Cisco TAC.
 Syslogs:
    106026, 106027
----------------------------------------------------------------
Name: host-move-pkt
FP host move packet:
    This counter will increment when the appliance/context is configured for transparent 
and source interface of a known L2 MAC address is detected on a different interface.
 Recommendation:
    This indicates that a host has been moved from one interface (i.e. LAN segment) to 
another. This condition is normal while in transparent mode if the host has in fact been 
moved. However, if the host move toggles back and forth between interfaces, a network loop 
may be present.
 Syslogs:
    412001, 412002, 322001
----------------------------------------------------------------
Name: tfw-no-mgmt-ip-config