Cisco Cisco ASA 5510 Adaptive Security Appliance Leaflet

Page of 1264
 
3-74
Cisco ASA Series 명령 참조 , S 명령
  
3      show as-path-access-list through show auto-update 명령              
  show asp drop
Check syslogs and alerts on CXSC module. 
Syslogs: 
429002 
---------------------------------------------------------------- 
Name: cxsc-fail-close 
CXSC fail-close: 
This reason is given for terminating a flow since CXSC card is down and fail-close 
option was used with CXSC action. 
Recommendations: 
Check and bring up CXSC card. 
Syslogs: 
429001 
---------------------------------------------------------------- 
Name: reset-by-cx 
Flow reset by CXSC: 
This reason is given for terminating a TCP flow as requested by the CXSC module.
Recommendations: 
Check syslogs and alerts on CXSC module. 
Syslogs: 
429003 
----------------------------------------------------------------
Name: ips-request
Flow terminated by IPS:
    This reason is given for terminating a flow as requested by IPS module.
Recommendations:
    Check syslogs and alerts on IPS module.
Syslogs:
    420002
----------------------------------------------------------------
Name: cxsc-request 
CXSC Module requested drop: 
This counter is incremented and the packet is dropped as requested by the CXSC module 
when the packet matches a signature on the CXSC engine. 
Recommendations: 
Check syslogs and alerts on the CXSC module.
Syslogs: 
429002 
----------------------------------------------------------------
Name: cxsc-bad-tlv-received 
CXSC Module requested drop: 
This counter is incremented and the packet is dropped as requested by the CXSC module 
when the packet has bad TLVs. 
Recommendations: 
Check syslogs and alerts on the CXSC module.