ASA log 106015 - CiscoHQ

gingnang · 08-12-2008, 03:41 AM

Hi all,

Thanks for taking your time to read my post!

I use ASA5510 version 8.0(3).

My question is

Does ASA forward RST flaged packet to the other peer if ASA received RST flaged packet from one peer?
2 peers are on different interface in this case.

I sometimes get log 106015 like below.

22 May 21 2008 14:xx:xx 106015 Deny TCP (no connection) from 10.10.xx.xx/20638 to 10.1.xx.xx/yyy flags ACK on interface outside

This log explains that there is no connection entry for this packet, so get dropped.

I am pretty sure that 10.10.xx.xx sent RST flaged packet for some reason and ASA tore down the connection entry from conn table.

When ASA deletes the entry from conn table, Does ASA send RST flaged packet to remote end.

It seems like 10.1.xx.xx does not know the fact that the connection is deleted and keeps sending packet which results in bunch of that log.

Thanks,

Gingnang