%FWSM-6-302010: 0 in use, 0 most used: isn't strange?

[Giorgio Romano]

hi everyone,

I think I got a strange behavior on a context of my WS-SVC-FWM-1 (on a Catalyst 6509 running

IOS 12.2(18)SXF17a) that is running FWSM Firewall Version 4.1(3).

This context sends these log messages every ten minutes:

Jul 17 2011 23:31:16: %FWSM-6-302010: 0 in use, 0 most used

Jul 17 2011 23:31:17: %FWSM-6-302010: 2245 in use, 107133 most used

Jul 17 2011 23:41:21: %FWSM-6-302010: 0 in use, 0 most used

Jul 17 2011 23:41:22: %FWSM-6-302010: 2818 in use, 107133 most used

If I issue the "show conn" three seconds later the log message, the output I got is:

FWSM#   sh conn

1041 in use, 107133 most used

In another context on the same FWSM the log message sent every ten minutes is just this one:

Jul 17 2011 23:31:17: %FWSM-6-302010: 1358 in use, 72503 most used

Jul 17 2011 23:41:22: %FWSM-6-302010: 1590 in use, 72503 most used

In this case there is no the log message where the "in use" field and "most used" field are 0 (zero).

why does the context send the message with the "in use" field and "most used" field 0 (zero).

How is it possible?

thank you for any answer

giorgio

[Parminder Sian]

Hi Giorgio,

This message appears after a TCP connection  restarts. When you get "%FWSM-6-302010: 0 in use, 0 most used"

, check the translations as well using command "show xlate" it should be 0 as well. I guess your tcp connections are resetting because of some reason within your network.

Regards,

Parminder Sian