topic Hi, in Network Security

Cisco Real Time Logging Need Help Disabled CLI

nharripersaud — Tue, 12 Mar 2019 07:52:22 GMT

Hello,

At some point Cisco Real-Time System Loggin was turned on via CLI and whenever I use putty now to go into the CLI the real-time logging is running. I can't stop it. I tried everything I know, ctrl-z, q and nothing is stopping it.

Can someone tell me how to stop it?

It looks something like this below:

%ASA-4-402127: CRYPTO: The ASA is skipping the writing of latest Crypto Archive File as the maximum # of files ( 2 ) allowed have been written to < disk0:/crypto_archive >. Please archive & remove files from < disk0:/crypto_archive > if you want more Crypto Archive Files saved

%ASA-4-402127: CRYPTO: The ASA is skipping the writing of latest Crypto Archive File as the maximum # of files ( 2 ) allowed have been written to < disk0:/crypto_archive >. Please archive & remove files from < disk0:/crypto_archive > if you want more Crypto Archive Files saved
%ASA-4-402127: CRYPTO: The ASA is skipping the writing of latest Crypto Archive File as the maximum # of files ( 2 ) allowed have been written to < disk0:/crypto_archive >. Please archive & remove files from < disk0:/crypto_archive > if you want more Crypto Archive Files saved

%ASA-4-402127: CRYPTO: The ASA is skipping the writing of latest Crypto Archive File as the maximum # of files ( 2 ) allowed have been written to < disk0:/crypto_archive >. Please archive & remove files from < disk0:/crypto_archive > if you want more Crypto Archive Files saved
%ASA-4-402127: CRYPTO: The ASA is skipping the writing of latest Crypto Archive File as the maximum # of files ( 2 ) allowed have been written to < disk0:/crypto_archive >. Please archive & remove files from < disk0:/crypto_archive > if you want more Crypto Archive Files saved
%ASA-4-402127: CRYPTO: The ASA is skipping the writing of latest Crypto Archive File as the maximum # of f

%ASA-6-305012: Teardown dynamic UDP translation from inside:xxxxxxxx/39290 to outside:xxx/34085 duration 0:00:30

%ASA-6-305012: Teardown dynamic UDP translation from inside:1xxxxx2/53473 to outside:xxx/26369 duration 0:00:30

%ASA-6-106015: Deny TCP (no connection) from 1xxxxx/45609 to xxxx/443 flags FIN ACK on interface inside

%ASA-6-106015: Deny

I "x" out the ip addresses.

Thanks for your help

Hi,

Dina Odeh — Mon, 13 Jun 2016 07:29:53 GMT

Hi,

Kindly first find the link that describe this log below:

https://www.cisco.com/cgi-bin/Support/Errordecoder/index.cgi?action=search&counter=0&paging=5&links=reference&index=all&query=%25ASA-4-402127:

A functional problem with the hardware crypto chip was detected (see messages 4402124 and 4402125). This message indicates a crypto archive file was not written, because the maximum number of crypto archive files already existed.

max_number--Maximum number of files allowed in the archive directory; currently set to two

archive_directory--Name of the archive directory

Recommended Action: Forward previously generated crypto archive files to the Cisco TAC. Remove the previously generated archive file(s) so that more can be written (if deemed necessary).

Could you tell me what is the ASA version. We have some bugs assigned for this issue as:

https://bst.cloudapps.cisco.com/bugsearch/bug/CSCtn56501

For now, I think you can copy these files from the flash to your machine, then delete them.

The ASA will overwrite them now and logs will removed.

Thanks for the response, but

nharripersaud — Mon, 13 Jun 2016 12:59:53 GMT

Thanks for the response, but that is not what I was asking. I don't want to know what the logs are showing, i know this information.

I want to know how to stop it from running whenever I open up the CLI.

Thanks

Problem resolved. I went into

nharripersaud — Mon, 13 Jun 2016 14:42:19 GMT

Problem resolved. I went into the ASDM logging filter and disabled console messages.

Hi,

Dina Odeh — Mon, 13 Jun 2016 16:01:02 GMT

Hi,

I see that your issue has been resolved by disabling the console logs.

You can also delete the archive files from the flash and logs will removed after that as I mentioned in my previous post 🙂