TCP Reset-O and -I on ASA

j.allnutt · ‎05-21-2015

Server team is seeing failures and below error code.

Update-StorageGroupCopy : Seeding failed : Database seeding error: An unexpected error has occurred: Error Code (0x79).

At line:1 char:24

+ Update-StorageGroupCopy <<<< -Identity EXCH-MBX26\SG1 -StandbyMachine EX07-MBX26DR

+ CategoryInfo : InvalidOperation: (EXCH-MBX26\SG1:StorageGroupIdParameter) [Update-StorageGroupCopy], ErrorOnlineEdbSeedingException

+ FullyQualifiedErrorId : D6A2DD60,Microsoft.Exchange.Management.SystemConfigurationTasks.UpdateStorageGroupCopy

We are seeting TCP Reset-O and -I from the ASA during the times they are reporting these errors. Please see the logs below.

5/17/2015 - 7:30 - 8:15AM EST
1 5/17/15
7:58:00.000 AM
May 17 07:58:00 rp-asa-1.allegisgroup.com RP-ASA-1 %ASA-6-302014: Teardown TCP connection 1399587520 for WAN:10.32.155.46/38843 to RP-Exchange_2007:10.42.155.44/445 duration 0:00:14 bytes 11349 TCP Reset-O
Dest_Port = 445 Source_IP = 10.32.155.46 source = udp:514 sourcetype = syslog
2 5/17/15
7:47:45.000 AM
May 17 07:47:45 rp-asa-1.allegisgroup.com RP-ASA-1 %ASA-6-302014: Teardown TCP connection 1376644049 for WAN:10.32.155.46/58715 to RP-Exchange_2007:10.42.155.44/135 duration 16:09:38 bytes 964 TCP Reset-O
Dest_Port = 135 Source_IP = 10.32.155.46 source = udp:514 sourcetype = syslog
3 5/17/15
7:47:45.000 AM
May 17 07:47:45 rp-asa-1.allegisgroup.com RP-ASA-1 %ASA-6-302014: Teardown TCP connection 1399240099 for WAN:10.32.155.46/58712 to RP-Exchange_2007:10.42.155.44/37999 duration 0:06:20 bytes 9592 TCP Reset-O
Dest_Port = 37999 Source_IP = 10.32.155.46 source = udp:514 sourcetype = syslog
4 5/17/15
7:47:45.000 AM
May 17 07:47:45 rp-asa-1.allegisgroup.com RP-ASA-1 %ASA-6-302014: Teardown TCP connection 1399370861 for WAN:10.32.155.46/56659 to RP-Exchange_2007:10.42.155.44/38091 duration 0:00:16 bytes 4651 TCP Reset-O
Dest_Port = 38091 Source_IP = 10.32.155.46 source = udp:514 sourcetype = syslog
5 5/17/15
7:41:23.000 AM
May 17 07:41:23 rp-asa-1.allegisgroup.com RP-ASA-1 %ASA-6-302014: Teardown TCP connection 1399240094 for WAN:10.32.155.46/59491 to RP-Exchange_2007:10.42.155.44/37998 duration 0:00:00 bytes 0 TCP Reset-O
Dest_Port = 37998 Source_IP = 10.32.155.46 source = udp:514 sourcetype = syslog
6 5/17/15
7:41:22.000 AM
May 17 07:41:22 rp-asa-1.allegisgroup.com RP-ASA-1 %ASA-6-302014: Teardown TCP connection 1399239947 for WAN:10.32.155.46/59491 to RP-Exchange_2007:10.42.155.44/37998 duration 0:00:00 bytes 0 TCP Reset-O
Dest_Port = 37998 Source_IP = 10.32.155.46 source = udp:514 sourcetype = syslog
7 5/17/15
7:41:22.000 AM
May 17 07:41:22 rp-asa-1.allegisgroup.com RP-ASA-1 %ASA-6-302014: Teardown TCP connection 1399239798 for WAN:10.32.155.46/59491 to RP-Exchange_2007:10.42.155.44/37998 duration 0:00:00 bytes 0 TCP Reset-O

Could someone please help me with what is causing the resets?

Thanks,

Jim

Vibhor Amrodia · ‎05-21-2015

Hi,

These logs which you are seeing on the ASA device related to the RESET I or O would mean that the ASA device received a RESET packet. Now , O and I stands for RESET being received from the Higher Security Interface and voice versa for O.

You would have to find the reason why the stream is being reset by the endpoints.

Thanks and Regards,

Vibhor Amrodia