Cisco ASA Series Cli Configuration Manual page 1523

Chapter 1 Configuring the ASA CX Module
Output Table:
L2 - Output Table:
L2 - Input Table:
Last clearing of hits counters: Never
The following is sample output from the show asp drop command. This output is just an example and
lists all the possible reasons for a dropped frame or flow from the ASA CX module:
hostname# show asp drop
Frame drop:
CXSC Module received packet with bad TLV's (cxsc-bad-tlv-received)
CXSC Module requested drop (cxsc-request)
CXSC card is down (cxsc-fail-close)
CXSC config removed for flow (cxsc-fail)
CXSC Module received malformed packet (cxsc-malformed-packet)
Last clearing: 18:12:58 UTC May 11 2012 by enable_15
Flow drop:
Flow terminated by CXSC (cxsc-request)
Flow reset by CXSC (reset-by-cxsc)
CXSC fail-close (cxsc-fail-close)
Last clearing: 18:12:58 UTC May 11 2012 by enable_15
The following is sample output from the show asp event dp-cp cxsc-msg command:
hostname# show asp event dp-cp cxsc-msg
DP-CP EVENT QUEUE
Punt Event Queue
Identity-Traffic Event Queue
General Event Queue
Syslog Event Queue
Non-Blocking Event Queue
Midpath High Event Queue
Midpath Norm Event Queue
SRTP Event Queue
HA Event Queue
Threat-Detection Event Queue
ARP Event Queue
IDFW Event Queue
CXSC Event Queue
EVENT-TYPE
cxsc-msg
The following is sample output from the show conn detail command:
hostname# show conn detail
0 in use, 105 most used
Flags: A - awaiting inside ACK to SYN, a - awaiting outside ACK to SYN,
ALLOC ALLOC-FAIL ENQUEUED ENQ-FAIL
1
B - initial SYN from outside, b - TCP state-bypass or nailed, C - CTIQBE media,
D - DNS, d - dump, E - outside back connection, F - outside FIN, f - inside FIN,
G - group, g - MGCP, H - H.323, h - H.225.0, I - inbound data,
i - incomplete, J - GTP, j - GTP data, K - GTP t3-response
k - Skinny media, M - SMTP data, m - SIP media, n - GUP
O - outbound data, P - inside back connection, p - Phone-proxy TFTP connection,
q - SQL*Net data, R - outside acknowledged FIN,
R - UDP SUNRPC, r - inside acknowledged FIN, S - awaiting inside SYN,
s - awaiting outside SYN, T - SIP, t - SIP transient, U - up,
V - VPN orphan, W - WAAS,
X - inspected by service module
QUEUE-LEN HIGH-WATER
0 5
0 0
0 4
4 90
0 2
0 53
8074 8288
0 0
0 0
0 3
0 2048
0 0
0 1
RETIRED 15SEC-RATE
0 1 0
Cisco ASA Series CLI Configuration Guide
Monitoring the ASA CX Module
2
1
1
3
1
2
1
1
1 0
1-19