Cisco Cisco ASA 5510 Adaptive Security Appliance Leaflet
3-74
Cisco ASA Series 명령 참조 , S 명령
3장 show as-path-access-list through show auto-update 명령
show asp drop
Check syslogs and alerts on CXSC module.
Syslogs:
429002
----------------------------------------------------------------
Name: cxsc-fail-close
CXSC fail-close:
This reason is given for terminating a flow since CXSC card is down and fail-close
option was used with CXSC action.
Recommendations:
Check and bring up CXSC card.
Syslogs:
429001
----------------------------------------------------------------
Name: reset-by-cx
Flow reset by CXSC:
This reason is given for terminating a TCP flow as requested by the CXSC module.
Recommendations:
Check syslogs and alerts on CXSC module.
Syslogs:
429003
----------------------------------------------------------------
Name: ips-request
Flow terminated by IPS:
This reason is given for terminating a flow as requested by IPS module.
Recommendations:
Check syslogs and alerts on IPS module.
Syslogs:
420002
----------------------------------------------------------------
Name: cxsc-request
CXSC Module requested drop:
This counter is incremented and the packet is dropped as requested by the CXSC module
when the packet matches a signature on the CXSC engine.
Recommendations:
Check syslogs and alerts on the CXSC module.
Syslogs:
429002
----------------------------------------------------------------
Name: cxsc-bad-tlv-received
CXSC Module requested drop:
This counter is incremented and the packet is dropped as requested by the CXSC module
when the packet has bad TLVs.
Recommendations:
Check syslogs and alerts on the CXSC module.