Cisco Cisco ASA 5510 Adaptive Security Appliance Fascicule
3-67
Cisco ASA Series 명령 참조, S 명령
3장 show as-path-access-list through show auto-update 명령
show asp drop
Recommendation:
This indicates that a software error should be reported to the Cisco TAC.
Syslogs:
None
----------------------------------------------------------------
Name: vpn-lock-error
IPsec locking error:
This counter is incremented when VPN flow cannot be created due to an internal locking
error.
Recommendation:
This condition should never be encountered during normal operation and may indicate a
software problem with the appliance. Contact the Cisco Technical Assistance Center (TAC)
if this error occurs.
Syslogs:
None.
----------------------------------------------------------------
Name: out-of-memory
No memory to complete flow:
This counter is incremented when the appliance is unable to create a flow because of
insufficient memory.
Recommendation:
Verify that the box is not under attack by checking the current connections. Also
verify if the configured timeout values are too large resulting in idle flows residing in
memory longer. Check the free memory available by issuing 'show memory'. If free memory is
low, issue the command 'show processes memory' to determine which processes are utilizing
most of the memory.
Syslogs:
None
----------------------------------------------------------------
Name: parent-closed
Parent flow is closed:
When the parent flow of a subordinating flow is closed, the subordinating flow is also
closed. For example, an FTP data flow (subordinating flow) will be closed with this
specific reason when its control flow (parent flow) is terminated. This reason is also
given when a secondary flow (pin-hole) is closed by its controlling application. For
example, when the BYE messaged is received, the SIP inspection engine (controlling
application) will close the corresponding SIP RTP flows (secondary flow).
Recommendation:
None.
Syslogs:
None.
----------------------------------------------------------------
Name: closed-by-inspection
Flow closed by inspection:
This reason is given for closing a flow due to an error detected during application
inspection. For example, if an error is detected during inspecting an H323 message, the
corresponding H323 flow is closed with this reason.