# show asp drop Frame drop: NAT-T keepalive message (natt-keepalive) 204501 IPSEC tunnel is down (ipsec-tun-down) 11469 VPN reclassify failed (vpn-reclassify-failed) 2357 Punt no memory (punt-no-mem) 450 Flow is being freed (flow-being-freed) 1 Invalid TCP Length (invalid-tcp-hdr-length) 499 No valid adjacency (no-adjacency) 27368 No route to host (no-route) 62312 Flow is denied by configured rule (acl-drop) 40431425 Invalid SPI (np-sp-invalid-spi) 2166 First TCP packet not SYN (tcp-not-syn) 1127735 TCP failed 3 way handshake (tcp-3whs-failed) 11524 TCP RST/FIN out of order (tcp-rstfin-ooo) 131572 TCP SEQ in SYN/SYNACK invalid (tcp-seq-syn-diff) 53 TCP SYNACK on established conn (tcp-synack-ooo) 1 TCP packet SEQ past window (tcp-seq-past-win) 2193 TCP invalid ACK (tcp-invalid-ack) 198 TCP Out-of-Order packet buffer full (tcp-buffer-full) 12146 TCP Out-of-Order packet buffer timeout (tcp-buffer-timeout) 757 TCP RST/SYN in window (tcp-rst-syn-in-win) 1196 TCP dup of packet in Out-of-Order queue (tcp-dup-in-queue) 6 TCP packet failed PAWS test (tcp-paws-fail) 3183 Output QoS rate exceeded (rate-exceeded) 19126620 CTM returned error (ctm-error) 375 Slowpath security checks failed (sp-security-failed) 52193934 Dropped by standby unit (fo-standby) 2792 Expired flow (flow-expired) 52 ICMP Inspect bad icmp code (inspect-icmp-bad-code) 4777 ICMP Inspect seq num not matched (inspect-icmp-seq-num-not-matched) 149932 ICMP Error Inspect no existing conn (inspect-icmp-error-no-existing-conn) 2 FP L2 rule drop (l2_acl) 4673256 Unable to obtain connection lock (connection-lock) 3 Interface is down (interface-down) 8083407 Dropped pending packets in a closed socket (np-socket-closed) 843 Dispatch queue tail drops (dispatch-queue-limit) 82 IKE new SA limit exceeded (ike-sa-rate-limit) 6377365 NAT failed (nat-xlate-failed) 54 Last clearing: Never Flow drop: Tunnel has been torn down (tunnel-torn-down) 4714 Need to start IKE negotiation (need-ike) 18176108 VPN overlap conflict (vpn-overlap-conflict) 2891222 VPN decryption missing (vpn-missing-decrypt) 2556 Flow is denied by access rule (acl-drop) 6445776 NAT reverse path failed (nat-rpf-failed) 1054 Inspection failure (inspect-fail) 27158 SSL bad record detected (ssl-bad-record-detect) 2160 SSL handshake failed (ssl-handshake-failed) 54056 DTLS hello processed and closed (dtls-hello-close) 6 Last clearing: Never # show asp drop Frame drop: NAT-T keepalive message (natt-keepalive) 204504 IPSEC tunnel is down (ipsec-tun-down) 11469 VPN reclassify failed (vpn-reclassify-failed) 2357 Punt no memory (punt-no-mem) 450 Flow is being freed (flow-being-freed) 1 Invalid TCP Length (invalid-tcp-hdr-length) 499 No valid adjacency (no-adjacency) 27381 No route to host (no-route) 62312 Flow is denied by configured rule (acl-drop) 40431807 Invalid SPI (np-sp-invalid-spi) 2166 First TCP packet not SYN (tcp-not-syn) 1127751 TCP failed 3 way handshake (tcp-3whs-failed) 11524 TCP RST/FIN out of order (tcp-rstfin-ooo) 131573 TCP SEQ in SYN/SYNACK invalid (tcp-seq-syn-diff) 53 TCP SYNACK on established conn (tcp-synack-ooo) 1 TCP packet SEQ past window (tcp-seq-past-win) 2193 TCP invalid ACK (tcp-invalid-ack) 198 TCP Out-of-Order packet buffer full (tcp-buffer-full) 12146 TCP Out-of-Order packet buffer timeout (tcp-buffer-timeout) 757 TCP RST/SYN in window (tcp-rst-syn-in-win) 1196 TCP dup of packet in Out-of-Order queue (tcp-dup-in-queue) 6 TCP packet failed PAWS test (tcp-paws-fail) 3183 Output QoS rate exceeded (rate-exceeded) 19126620 CTM returned error (ctm-error) 375 Slowpath security checks failed (sp-security-failed) 52193975 Dropped by standby unit (fo-standby) 2792 Expired flow (flow-expired) 52 ICMP Inspect bad icmp code (inspect-icmp-bad-code) 4777 ICMP Inspect seq num not matched (inspect-icmp-seq-num-not-matched) 149932 ICMP Error Inspect no existing conn (inspect-icmp-error-no-existing-conn) 2 FP L2 rule drop (l2_acl) 4673310 Unable to obtain connection lock (connection-lock) 3 Interface is down (interface-down) 8083415 Dropped pending packets in a closed socket (np-socket-closed) 843 Dispatch queue tail drops (dispatch-queue-limit) 82 IKE new SA limit exceeded (ike-sa-rate-limit) 6377431 NAT failed (nat-xlate-failed) 54 Last clearing: Never Flow drop: Tunnel has been torn down (tunnel-torn-down) 4714 Need to start IKE negotiation (need-ike) 18177354 VPN overlap conflict (vpn-overlap-conflict) 2891428 VPN decryption missing (vpn-missing-decrypt) 2556 Flow is denied by access rule (acl-drop) 6445892 NAT reverse path failed (nat-rpf-failed) 1054 Inspection failure (inspect-fail) 27160 SSL bad record detected (ssl-bad-record-detect) 2160 SSL handshake failed (ssl-handshake-failed) 54056 DTLS hello processed and closed (dtls-hello-close) 6 Last clearing: Never # show asp drop Frame drop: NAT-T keepalive message (natt-keepalive) 204519 IPSEC tunnel is down (ipsec-tun-down) 11469 VPN reclassify failed (vpn-reclassify-failed) 2357 Punt no memory (punt-no-mem) 450 Flow is being freed (flow-being-freed) 1 Invalid TCP Length (invalid-tcp-hdr-length) 499 No valid adjacency (no-adjacency) 27381 No route to host (no-route) 62313 Flow is denied by configured rule (acl-drop) 40433821 Invalid SPI (np-sp-invalid-spi) 2166 First TCP packet not SYN (tcp-not-syn) 1127861 TCP failed 3 way handshake (tcp-3whs-failed) 11530 TCP RST/FIN out of order (tcp-rstfin-ooo) 131582 TCP SEQ in SYN/SYNACK invalid (tcp-seq-syn-diff) 53 TCP SYNACK on established conn (tcp-synack-ooo) 1 TCP packet SEQ past window (tcp-seq-past-win) 2195 TCP invalid ACK (tcp-invalid-ack) 198 TCP Out-of-Order packet buffer full (tcp-buffer-full) 12146 TCP Out-of-Order packet buffer timeout (tcp-buffer-timeout) 757 TCP RST/SYN in window (tcp-rst-syn-in-win) 1196 TCP dup of packet in Out-of-Order queue (tcp-dup-in-queue) 6 TCP packet failed PAWS test (tcp-paws-fail) 3183 Output QoS rate exceeded (rate-exceeded) 19126929 CTM returned error (ctm-error) 375 Slowpath security checks failed (sp-security-failed) 52194224 Dropped by standby unit (fo-standby) 2792 Expired flow (flow-expired) 52 ICMP Inspect bad icmp code (inspect-icmp-bad-code) 4777 ICMP Inspect seq num not matched (inspect-icmp-seq-num-not-matched) 149932 ICMP Error Inspect no existing conn (inspect-icmp-error-no-existing-conn) 2 FP L2 rule drop (l2_acl) 4673580 Unable to obtain connection lock (connection-lock) 3 Interface is down (interface-down) 8083453 Dropped pending packets in a closed socket (np-socket-closed) 843 Dispatch queue tail drops (dispatch-queue-limit) 82 IKE new SA limit exceeded (ike-sa-rate-limit) 6377816 NAT failed (nat-xlate-failed) 54 Last clearing: Never Flow drop: Tunnel has been torn down (tunnel-torn-down) 4714 Need to start IKE negotiation (need-ike) 18177440 VPN overlap conflict (vpn-overlap-conflict) 2891444 VPN decryption missing (vpn-missing-decrypt) 2556 Flow is denied by access rule (acl-drop) 6445908 NAT reverse path failed (nat-rpf-failed) 1054 Inspection failure (inspect-fail) 27160 SSL bad record detected (ssl-bad-record-detect) 2160 SSL handshake failed (ssl-handshake-failed) 54056 DTLS hello processed and closed (dtls-hello-close) 6 Last clearing: Never