Remote VPN clients cannot access remote site through site-to-site VPN

hshzhu101 · ‎01-13-2016

Hello,

I have 2 sites:

SiteA:

ASA 5525:

VPN gateway for remote users

LAN1:10.24.10.0/24

LAN2:10.24.15.0/24

LAN3:10.24.24.0/24

Remote VPN pool:10.1.84.0/24

site B :

ASA 5520

LAN1:10.1.0.0/24

LAN2:10.1.1.0/24

Both sites are connected through a site to site VPN,and the VPN work normally.

Remote clients(VPN clients)can connect to Site A LAN and see machines on LAN A but cannot see Site B LAN.

I want remote vpn clients can also visit Site B,but I have try many times,it not succeed.

What do I miss?

Bellow is part of the configuration:

SiteA:

ip local pool Remote_admin 10.1.84.100-10.1.84.200 mask 255.255.255.0

same-security-traffic permit intra-interface

object network Subnet1
subnet 10.1.0.0 255.255.255.0
object network Subnet2
subnet 10.1.1.0 255.255.255.0

object network Corp
subnet 10.24.15.0 255.255.255.0
object network Servers
subnet 10.24.10.0 255.255.255.0

object network Remote_admin
subnet 10.1.84.0 255.255.255.0

object-group network Subnets

network-object object Subnet1
network-object object Subnet2

object-group network SF_Network
network-object 10.24.24.0 255.255.255.0
network-object object Corp
network-object object Servers

access-list split standard permit 10.24.15.0 255.255.255.0

access-list split standard permit 10.24.10.0 255.255.255.0

access-list split standard permit 10.24.24.0 255.255.255.0

access-list split standard permit 10.1.0.0 255.255.255.0

access-list split standard permit 10.1.1.0 255.255.255.0

access-list Outside1_cryptomap extended permit ip object-group SF_Network object-group Subnets
access-list Outside1_cryptomap extended permit ip object Remote_admin object-group Subnets

nat (Inside,Outside1) source static any any destination static Remote_admin Remote_admin
nat (Outside1,Outside1) source static Remote_admin Remote_admin destination static Subnets Subnets no-proxy-arp route-lookup
nat (Inside,Outside1) source static SF_Network SF_Network destination static Subnets Subnets no-proxy-arp route-lookup
nat (Inside,Outside1) after-auto source dynamic any interface
access-group Inside_access_in in interface Inside
access-group global_access global

crypto ipsec ikev1 transform-set Trans esp-aes-256 esp-sha-hmac

crypto dynamic-map dyn1 65534 set security-association lifetime seconds 28800
crypto dynamic-map dyn1 65534 set security-association lifetime kilobytes 4608000
crypto dynamic-map dyn1 65534 set reverse-route

crypto map Outside1_map 1 match address Outside1_cryptomap
crypto map Outside1_map 1 set peer X.X.X.X
crypto map Outside1_map 1 set ikev1 transform-set Trans
crypto map Outside1_map 1 set security-association lifetime seconds 28800
crypto map Outside1_map 1 set security-association lifetime kilobytes 4608000
crypto map Outside1_map 65534 ipsec-isakmp dynamic dyn1

crypto map Outside1_map interface Outside1

crypto isakmp nat-traversal 3600
crypto ikev1 enable Outside1
crypto ikev1 policy 10
authentication pre-share
encryption 3des
hash md5
group 2
lifetime 86400

group-policy GroupPolicy_X.X.X.X internal
group-policy GroupPolicy_X.X.X.X attributes
vpn-tunnel-protocol ikev1

group-policy Remote_Admin internal
group-policy Remote_Admin attributes
vpn-session-timeout none
vpn-tunnel-protocol ikev1
split-tunnel-policy tunnelspecified
split-tunnel-network-list value split
address-pools value Remote_admin

tunnel-group X.X.X.Xtype ipsec-l2l
tunnel-group X.X.X.X general-attributes
default-group-policy GroupPolicy_X.X.X.X
tunnel-group X.X.X.X ipsec-attributes
ikev1 pre-shared-key *****

tunnel-group Remote_admin type remote-access
tunnel-group Remote_admin general-attributes
address-pool Remote_admin
default-group-policy Remote_Admin
tunnel-group Remote_admin ipsec-attributes
ikev1 pre-shared-key *****

SiteB:

access-list no_nat extended permit ip 10.1.1.0 255.255.255.0 10.1.84.0 255.255.255.0
access-list no_nat extended permit ip 10.1.0.0 255.255.255.0 10.1.84.0 255.255.255.0
access-list no_nat extended permit ip 10.1.0.0 255.255.255.0 10.24.24.0 255.255.255.0
access-list no_nat extended permit ip 10.1.0.0 255.255.255.0 10.24.10.0 255.255.255.0
access-list no_nat extended permit ip 10.1.0.0 255.255.255.0 10.24.15.0 255.255.255.0
access-list no_nat extended permit ip 10.1.1.0 255.255.255.0 10.24.24.0 255.255.255.0
access-list no_nat extended permit ip 10.1.1.0 255.255.255.0 10.24.10.0 255.255.255.0
access-list no_nat extended permit ip 10.1.1.0 255.255.255.0 10.24.15.0 255.255.255.0

access-list Office extended permit ip 10.1.0.0 255.255.255.0 10.24.24.0 255.255.255.0
access-list Office extended permit ip 10.1.1.0 255.255.255.0 10.1.84.0 255.255.255.0
access-list Office extended permit ip 10.1.0.0 255.255.255.0 10.1.84.0 255.255.255.0
access-list Office extended permit ip 10.1.0.0 255.255.255.0 10.24.10.0 255.255.255.0
access-list Office extended permit ip 10.1.0.0 255.255.255.0 10.24.15.0 255.255.255.0
access-list Office extended permit ip 10.1.1.0 255.255.255.0 10.24.24.0 255.255.255.0
access-list Office extended permit ip 10.1.1.0 255.255.255.0 10.24.10.0 255.255.255.0
access-list Office extended permit ip 10.1.1.0 255.255.255.0 10.24.15.0 255.255.255.0

nat (Inside) 0 access-list no_nat
crypto isakmp policy 20
authentication pre-share
encryption 3des
hash md5
group 2
lifetime 86400
crypto ipsec transform-set Office esp-aes-256 esp-sha-hmac
crypto map mymap 90 match address Office
crypto map mymap 90 set peer X.X.X.X
crypto map mymap 90 set transform-set Office
crypto map mymap 90 set security-association lifetime seconds 28800
crypto map mymap 90 set security-association lifetime kilobytes 4608000

crypto map mymap interface Outside

tunnel-group X.X.X.X type ipsec-l2l
tunnel-group X.X.X.X ipsec-attributes
pre-shared-key *

ramyraj2 · ‎01-13-2016

Hi hshzhu101,

Issue seems to be with the split tunnel value.

The split ACL does not include the remote networks:

LAN1:10.1.0.0/24

LAN2:10.1.1.0/24

Hence, you would need something as below:

access-list split standard permit 10.1.0.0 255.255.255.0

access-list split standard permit 10.1.1.0 255.255.255.0

Once you add this, you should be able to see these networks on your Anyconnect Window -> routes -> secured routes.

Let me know if that helps!

hshzhu101 · ‎01-13-2016

Dear ramyraj2, Very thanks for your help,in fact ,in my current configuration,I have add the configuration that you reminded.I just forget copy it to this discussion.But,it still not work.

ramyraj2 · ‎01-13-2016

Hi,

Please provide me the below outputs from both devices:

sh tech

sh cry isa sa

sh cry ips sa peer <ip>

Let me check with it.

hshzhu101 · ‎01-13-2016

SiteA:

show tech:

US-SF-FW1# sh tech-support

Cisco Adaptive Security Appliance Software Version 9.0(1)
Device Manager Version 7.1(1)52

Compiled on Fri 26-Oct-12 17:15 PDT by builders
System image file is "disk0:/asa901-smp-k8.bin"
Config file at boot was "startup-config"

CP-US-SF-FW1 up 23 days 16 hours

Hardware: ASA5525, 8192 MB RAM, CPU Lynnfield 2393 MHz, 1 CPU (4 cores)
ASA: 4096 MB RAM, 1 CPU (1 core)
Internal ATA Compact Flash, 8192MB
BIOS Flash MX25L6445E @ 0xffbb0000, 8192KB

Encryption hardware device : Cisco ASA-55xx on-board accelerator (revision 0x1)
Boot microcode : CNPx-MC-BOOT-2.00
SSL/IKE microcode : CNPx-MC-SSL-PLUS-T020
IPSec microcode : CNPx-MC-IPSEC-MAIN-0022
Number of accelerators: 1
Baseboard Management Controller (revision 0x1) Firmware Version: 2.4

0: Int: Internal-Data0/0 : address is a89d.2192.b467, irq 11
1: Ext: GigabitEthernet0/0 : address is a89d.2192.b46c, irq 5
2: Ext: GigabitEthernet0/1 : address is a89d.2192.b468, irq 5
3: Ext: GigabitEthernet0/2 : address is a89d.2192.b46d, irq 10
4: Ext: GigabitEthernet0/3 : address is a89d.2192.b469, irq 10
5: Ext: GigabitEthernet0/4 : address is a89d.2192.b46e, irq 5
6: Ext: GigabitEthernet0/5 : address is a89d.2192.b46a, irq 5
7: Ext: GigabitEthernet0/6 : address is a89d.2192.b46f, irq 10
8: Ext: GigabitEthernet0/7 : address is a89d.2192.b46b, irq 10
9: Int: Internal-Data0/1 : address is 0000.0001.0002, irq 0
10: Int: Internal-Control0/0 : address is 0000.0001.0001, irq 0
11: Int: Internal-Data0/2 : address is 0000.0001.0003, irq 0
12: Ext: Management0/0 : address is a89d.2192.b467, irq 0

Licensed features for this platform:
Maximum Physical Interfaces : Unlimited perpetual
Maximum VLANs : 200 perpetual
Inside Hosts : Unlimited perpetual
Failover : Active/Active perpetual
Encryption-DES : Enabled perpetual
Encryption-3DES-AES : Enabled perpetual
Security Contexts : 2 perpetual
GTP/GPRS : Disabled perpetual
AnyConnect Premium Peers : 2 perpetual
AnyConnect Essentials : Disabled perpetual
Other VPN Peers : 750 perpetual
Total VPN Peers : 750 perpetual
Shared License : Disabled perpetual
AnyConnect for Mobile : Disabled perpetual
AnyConnect for Cisco VPN Phone : Disabled perpetual
Advanced Endpoint Assessment : Disabled perpetual
UC Phone Proxy Sessions : 2 perpetual
Total UC Proxy Sessions : 2 perpetual
Botnet Traffic Filter : Disabled perpetual
Intercompany Media Engine : Disabled perpetual
IPS Module : Disabled perpetual
Cluster : Disabled perpetual

This platform has an ASA5525 VPN Premium license.

Serial Number: FCH1902K75B
Running Permanent Activation Key: 0x8f1aea42 0xb45dba37 0xf162d528 0xd6143cb0 0x8816d3a0
Configuration register is 0x1
Configuration last modified by enable_15 at 00:34:02.685 PST Wed Jan 13 2016

------------------ show disk0: controller ------------------

Flash Model: USB

------------------ show clock ------------------

16:44:48.154 PST Wed Jan 13 2016

------------------ show crashinfo ------------------

Saved crash: 16:00:00.000 PST Wed Dec 31 1969

------------------ show module ------------------

Mod Card Type Model Serial No.
--- -------------------------------------------- ------------------ -----------
0 ASA 5525-X with SW, 8 GE Data, 1 GE Mgmt, AC ASA5525 FCH1902K75B
ips Unknown N/A FCH1902K75B

Mod MAC Address Range Hw Version Fw Version Sw Version
--- --------------------------------- ------------ ------------ ---------------
0 a89d.2192.b467 to a89d.2192.b470 1.0 2.1(9)8 9.0(1)
ips a89d.2192.b465 to a89d.2192.b465 N/A N/A

Mod SSM Application Name Status SSM Application Version
--- ------------------------------ ---------------- --------------------------
ips Unknown No Image Present Not Applicable

Mod Status Data Plane Status Compatibility
--- ------------------ --------------------- -------------
0 Up Sys Not Applicable
ips Unresponsive Not Applicable

Mod License Name License Status Time Remaining
--- -------------- --------------- ---------------
ips IPS Module Disabled perpetual

------------------ show memory ------------------

Free memory: 3290200320 bytes (77%)
Used memory: 1004766976 bytes (23%)
------------- ------------------
Total memory: 4294967296 bytes (100%)

------------------ show conn count ------------------

251 in use, 849 most used

------------------ show xlate count ------------------

215 in use, 802 most used

------------------ show vpn-sessiondb summary ------------------

---------------------------------------------------------------------------
VPN Session Summary
---------------------------------------------------------------------------
Active : Cumulative : Peak Concur : Inactive
----------------------------------------------
IKEv1 IPsec/L2TP IPsec : 1 : 54 : 3
Site-to-Site VPN : 1 : 850 : 3
IKEv1 IPsec : 1 : 850 : 3
---------------------------------------------------------------------------
Total Active and Inactive : 2 Total Cumulative : 904
Device Total VPN Capacity : 750
Device Load : 0%
---------------------------------------------------------------------------

---------------------------------------------------------------------------
Tunnels Summary
---------------------------------------------------------------------------
Active : Cumulative : Peak Concurrent
----------------------------------------------
IKEv1 : 2 : 904 : 4
IPsec : 6 : 702 : 7
IPsecOverNatT : 1 : 25 : 3
---------------------------------------------------------------------------
Totals : 9 : 1631
---------------------------------------------------------------------------

------------------ show blocks ------------------

SIZE MAX LOW CNT
0 2950 2944 2950
4 400 399 399
80 2752 2718 2749
256 3100 3067 3095
1550 10624 10477 10548
2048 1848 1846 1848
2560 2964 2963 2964
4096 100 99 100
8192 100 100 100
9344 100 100 100
16384 157 157 157
65536 16 16 16
CORE LIMIT ALLOC HIGH CNT FAILED
0 24576 29 29 28 0

------------------ show blocks queue history detail ------------------

History buffer memory usage: 3744 bytes (default)
History analysis time limit: 100 msec

Please see 'show blocks exhaustion snapshot' for more information

------------------ show interface ------------------

Interface GigabitEthernet0/0 "Outside1", is up, line protocol is up
Hardware is i82574L rev00, BW 1000 Mbps, DLY 10 usec
Auto-Duplex(Full-duplex), Auto-Speed(1000 Mbps)
Input flow control is unsupported, output flow control is off
MAC address a89d.2192.b46c, MTU 1500
IP address 173.11.91.117, subnet mask 255.255.255.248
44765217 packets input, 40930332862 bytes, 0 no buffer
Received 62165 broadcasts, 0 runts, 0 giants
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort
0 pause input, 0 resume input
0 L2 decode drops
32380471 packets output, 8240000786 bytes, 0 underruns
0 pause output, 0 resume output
0 output errors, 0 collisions, 3 interface resets
0 late collisions, 0 deferred
15 input reset drops, 0 output reset drops
input queue (blocks free curr/low): hardware (486/451)
output queue (blocks free curr/low): hardware (454/373)
Traffic Statistics for "Outside1":
44732137 packets input, 40105633572 bytes
32380478 packets output, 7598538825 bytes
192786 packets dropped
1 minute input rate 16 pkts/sec, 3277 bytes/sec
1 minute output rate 15 pkts/sec, 2346 bytes/sec
1 minute drop rate, 0 pkts/sec
5 minute input rate 396 pkts/sec, 461597 bytes/sec
5 minute output rate 227 pkts/sec, 26940 bytes/sec
5 minute drop rate, 2 pkts/sec
Control Point Interface States:
Interface number is 3
Interface config status is active
Interface state is active
Interface GigabitEthernet0/1 "Inside", is up, line protocol is up
Hardware is i82574L rev00, BW 1000 Mbps, DLY 10 usec
Auto-Duplex(Full-duplex), Auto-Speed(1000 Mbps)
Input flow control is unsupported, output flow control is off
MAC address a89d.2192.b468, MTU 1500
IP address 10.24.24.1, subnet mask 255.255.255.0
35446484 packets input, 8028881549 bytes, 0 no buffer
Received 7 broadcasts, 0 runts, 0 giants
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort
0 pause input, 0 resume input
0 L2 decode drops
50015309 packets output, 42208364862 bytes, 0 underruns
0 pause output, 0 resume output
0 output errors, 0 collisions, 2 interface resets
0 late collisions, 0 deferred
3 input reset drops, 0 output reset drops
input queue (blocks free curr/low): hardware (463/385)
output queue (blocks free curr/low): hardware (478/419)
Traffic Statistics for "Inside":
35446439 packets input, 7304824689 bytes
50015309 packets output, 41286042783 bytes
133505 packets dropped
1 minute input rate 17 pkts/sec, 2232 bytes/sec
1 minute output rate 22 pkts/sec, 4987 bytes/sec
1 minute drop rate, 0 pkts/sec
5 minute input rate 238 pkts/sec, 27090 bytes/sec
5 minute output rate 414 pkts/sec, 464308 bytes/sec
5 minute drop rate, 1 pkts/sec
Control Point Interface States:
Interface number is 4
Interface config status is active
Interface state is active
Interface GigabitEthernet0/2 "", is administratively down, line protocol is down
Hardware is i82574L rev00, BW 1000 Mbps, DLY 10 usec
Auto-Duplex, Auto-Speed
Input flow control is unsupported, output flow control is off
Available but not configured via nameif
MAC address a89d.2192.b46d, MTU not set
IP address unassigned
0 packets input, 0 bytes, 0 no buffer
Received 0 broadcasts, 0 runts, 0 giants
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort
0 pause input, 0 resume input
0 L2 decode drops
0 packets output, 0 bytes, 0 underruns
0 pause output, 0 resume output
0 output errors, 0 collisions, 1 interface resets
0 late collisions, 0 deferred
0 input reset drops, 0 output reset drops
input queue (blocks free curr/low): hardware (511/511)
output queue (blocks free curr/low): hardware (511/511)
Control Point Interface States:
Interface number is 5
Interface config status is not active
Interface state is not active
Interface GigabitEthernet0/3 "", is administratively down, line protocol is down
Hardware is i82574L rev00, BW 1000 Mbps, DLY 10 usec
Auto-Duplex, Auto-Speed
Input flow control is unsupported, output flow control is off
Available but not configured via nameif
MAC address a89d.2192.b469, MTU not set
IP address unassigned
0 packets input, 0 bytes, 0 no buffer
Received 0 broadcasts, 0 runts, 0 giants
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort
0 pause input, 0 resume input
0 L2 decode drops
0 packets output, 0 bytes, 0 underruns
0 pause output, 0 resume output
0 output errors, 0 collisions, 1 interface resets
0 late collisions, 0 deferred
0 input reset drops, 0 output reset drops
input queue (blocks free curr/low): hardware (511/511)
output queue (blocks free curr/low): hardware (511/511)
Control Point Interface States:
Interface number is 6
Interface config status is not active
Interface state is not active
Interface GigabitEthernet0/4 "", is administratively down, line protocol is down
Hardware is i82574L rev00, BW 1000 Mbps, DLY 10 usec
Auto-Duplex, Auto-Speed
Input flow control is unsupported, output flow control is off
Available but not configured via nameif
MAC address a89d.2192.b46e, MTU not set
IP address unassigned
0 packets input, 0 bytes, 0 no buffer
Received 0 broadcasts, 0 runts, 0 giants
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort
0 pause input, 0 resume input
0 L2 decode drops
0 packets output, 0 bytes, 0 underruns
0 pause output, 0 resume output
0 output errors, 0 collisions, 1 interface resets
0 late collisions, 0 deferred
0 input reset drops, 0 output reset drops
input queue (blocks free curr/low): hardware (511/511)
output queue (blocks free curr/low): hardware (511/511)
Control Point Interface States:
Interface number is 7
Interface config status is not active
Interface state is not active
Interface GigabitEthernet0/5 "", is administratively down, line protocol is down
Hardware is i82574L rev00, BW 1000 Mbps, DLY 10 usec
Auto-Duplex, Auto-Speed
Input flow control is unsupported, output flow control is off
Available but not configured via nameif
MAC address a89d.2192.b46a, MTU not set
IP address unassigned
0 packets input, 0 bytes, 0 no buffer
Received 0 broadcasts, 0 runts, 0 giants
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort
0 pause input, 0 resume input
0 L2 decode drops
0 packets output, 0 bytes, 0 underruns
0 pause output, 0 resume output
0 output errors, 0 collisions, 1 interface resets
0 late collisions, 0 deferred
0 input reset drops, 0 output reset drops
input queue (blocks free curr/low): hardware (511/511)
output queue (blocks free curr/low): hardware (511/511)
Control Point Interface States:
Interface number is 8
Interface config status is not active
Interface state is not active
Interface GigabitEthernet0/6 "", is administratively down, line protocol is down
Hardware is i82574L rev00, BW 1000 Mbps, DLY 10 usec
Auto-Duplex, Auto-Speed
Input flow control is unsupported, output flow control is off
Available but not configured via nameif
MAC address a89d.2192.b46f, MTU not set
IP address unassigned
0 packets input, 0 bytes, 0 no buffer
Received 0 broadcasts, 0 runts, 0 giants
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort
0 pause input, 0 resume input
0 L2 decode drops
0 packets output, 0 bytes, 0 underruns
0 pause output, 0 resume output
0 output errors, 0 collisions, 1 interface resets
0 late collisions, 0 deferred
0 input reset drops, 0 output reset drops
input queue (blocks free curr/low): hardware (511/511)
output queue (blocks free curr/low): hardware (511/511)
Control Point Interface States:
Interface number is 9
Interface config status is not active
Interface state is not active
Interface GigabitEthernet0/7 "", is administratively down, line protocol is down
Hardware is i82574L rev00, BW 1000 Mbps, DLY 10 usec
Auto-Duplex, Auto-Speed
Input flow control is unsupported, output flow control is off
Available but not configured via nameif
MAC address a89d.2192.b46b, MTU not set
IP address unassigned
0 packets input, 0 bytes, 0 no buffer
Received 0 broadcasts, 0 runts, 0 giants
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort
0 pause input, 0 resume input
0 L2 decode drops
0 packets output, 0 bytes, 0 underruns
0 pause output, 0 resume output
0 output errors, 0 collisions, 1 interface resets
0 late collisions, 0 deferred
0 input reset drops, 0 output reset drops
input queue (blocks free curr/low): hardware (511/511)
output queue (blocks free curr/low): hardware (511/511)
Control Point Interface States:
Interface number is 10
Interface config status is not active
Interface state is not active
Interface Internal-Control0/0 "cplane", is up, line protocol is up
Hardware is en_vtun rev00, BW Unknown Speed-Capability, DLY 1000 usec
(Full-duplex), (1000 Mbps)
Input flow control is unsupported, output flow control is unsupported
MAC address 0000.0001.0001, MTU 1500
IP address 127.0.1.1, subnet mask 255.255.0.0
0 packets input, 0 bytes, 0 no buffer
Received 0 broadcasts, 0 runts, 0 giants
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort
0 pause input, 0 resume input
0 L2 decode drops
1053063 packets output, 57001954 bytes, 0 underruns
0 pause output, 0 resume output
0 output errors, 0 collisions, 0 interface resets
0 late collisions, 0 deferred
0 input reset drops, 0 output reset drops
input queue (blocks free curr/low): hardware (0/0)
output queue (blocks free curr/low): hardware (0/0)
Traffic Statistics for "cplane":
0 packets input, 0 bytes
0 packets output, 0 bytes
0 packets dropped
1 minute input rate 0 pkts/sec, 0 bytes/sec
1 minute output rate 0 pkts/sec, 0 bytes/sec
1 minute drop rate, 0 pkts/sec
5 minute input rate 0 pkts/sec, 0 bytes/sec
5 minute output rate 0 pkts/sec, 0 bytes/sec
5 minute drop rate, 0 pkts/sec
Control Point Interface States:
Interface number is 12
Interface config status is active
Interface state is active
Interface Internal-Data0/0 "asa_mgmt_plane", is up, line protocol is down
Hardware is i82574L rev00, BW 1000 Mbps, DLY 10 usec
Input flow control is unsupported, output flow control is off
MAC address a89d.2192.b467, MTU not set
IP address unassigned
0 packets input, 0 bytes, 0 no buffer
Received 0 broadcasts, 0 runts, 0 giants
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort
0 pause input, 0 resume input
0 L2 decode drops
0 packets output, 0 bytes, 0 underruns
0 pause output, 0 resume output
0 output errors, 0 collisions, 1 interface resets
0 late collisions, 0 deferred
0 input reset drops, 0 output reset drops
input queue (blocks free curr/low): hardware (511/511)
output queue (blocks free curr/low): hardware (511/511)
Traffic Statistics for "asa_mgmt_plane":
0 packets input, 0 bytes
0 packets output, 0 bytes
0 packets dropped
1 minute input rate 0 pkts/sec, 0 bytes/sec
1 minute output rate 0 pkts/sec, 0 bytes/sec
1 minute drop rate, 0 pkts/sec
5 minute input rate 0 pkts/sec, 0 bytes/sec
5 minute output rate 0 pkts/sec, 0 bytes/sec
5 minute drop rate, 0 pkts/sec
Control Point Interface States:
Interface number is 2
Interface config status is active
Interface state is active
Interface Internal-Data0/1 "", is down, line protocol is down
Hardware is ivshmem rev03, BW 1000 Mbps, DLY 10 usec
Input flow control is unsupported, output flow control is unsupported
MAC address 0000.0001.0002, MTU not set
IP address unassigned
0 packets input, 0 bytes, 0 no buffer
Received 0 broadcasts, 0 runts, 0 giants
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort
0 pause input, 0 resume input
0 L2 decode drops
0 packets output, 0 bytes, 0 underruns
0 pause output, 0 resume output
0 output errors, 0 collisions, 0 interface resets
0 late collisions, 0 deferred
0 output decode drops
0 input reset drops, 0 output reset drops
Queue Stats:
RX[00]: 0 packets, 0 bytes, 0 overrun
Blocks free curr/low: -1/2687
RX[01]: 0 packets, 0 bytes, 0 overrun
Blocks free curr/low: -1/2687
RX[02]: 0 packets, 0 bytes, 0 overrun
Blocks free curr/low: -1/2687
TX[00]: 0 packets, 0 bytes, 0 underruns
Blocks free curr/low: -1/2687
TX[01]: 0 packets, 0 bytes, 0 underruns
Blocks free curr/low: -1/2687
TX[02]: 0 packets, 0 bytes, 0 underruns
Blocks free curr/low: -1/2687
Control Point Interface States:
Interface number is 11
Interface config status is active
Interface state is active
Interface Internal-Data0/2 "mgmt_plane_int_tap", is up, line protocol is up
Hardware is en_vtun rev00, BW Unknown Speed-Capability, DLY 1000 usec
(Full-duplex), (1000 Mbps)
Input flow control is unsupported, output flow control is unsupported
MAC address 0000.0001.0003, MTU not set
IP address unassigned
1 packets input, 42 bytes, 0 no buffer
Received 0 broadcasts, 0 runts, 0 giants
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort
0 pause input, 0 resume input
0 L2 decode drops
0 packets output, 0 bytes, 0 underruns
0 pause output, 0 resume output
0 output errors, 0 collisions, 0 interface resets
0 late collisions, 0 deferred
0 input reset drops, 0 output reset drops
input queue (blocks free curr/low): hardware (0/0)
output queue (blocks free curr/low): hardware (0/0)
Traffic Statistics for "mgmt_plane_int_tap":
0 packets input, 0 bytes
0 packets output, 0 bytes
0 packets dropped
1 minute input rate 0 pkts/sec, 0 bytes/sec
1 minute output rate 0 pkts/sec, 0 bytes/sec
1 minute drop rate, 0 pkts/sec
5 minute input rate 0 pkts/sec, 0 bytes/sec
5 minute output rate 0 pkts/sec, 0 bytes/sec
5 minute drop rate, 0 pkts/sec
Control Point Interface States:
Interface number is 13
Interface config status is active
Interface state is active
Interface Management0/0 "management", is down, line protocol is down
Hardware is en_vtun rev00, BW 1000 Mbps, DLY 10 usec
Auto-Duplex, Auto-Speed
Input flow control is unsupported, output flow control is off
MAC address a89d.2192.b467, MTU 1500
IP address 192.168.1.1, subnet mask 255.255.255.0
0 packets input, 0 bytes, 0 no buffer
Received 0 broadcasts, 0 runts, 0 giants
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort
0 pause input, 0 resume input
0 L2 decode drops
1 packets output, 42 bytes, 0 underruns
0 pause output, 0 resume output
0 output errors, 0 collisions, 1 interface resets
0 late collisions, 0 deferred
0 input reset drops, 0 output reset drops
input queue (blocks free curr/low): hardware (0/0)
output queue (blocks free curr/low): hardware (0/0)
Traffic Statistics for "management":
0 packets input, 0 bytes
1 packets output, 28 bytes
0 packets dropped
1 minute input rate 0 pkts/sec, 0 bytes/sec
1 minute output rate 0 pkts/sec, 0 bytes/sec
1 minute drop rate, 0 pkts/sec
5 minute input rate 0 pkts/sec, 0 bytes/sec
5 minute output rate 0 pkts/sec, 0 bytes/sec
5 minute drop rate, 0 pkts/sec
Management-only interface. Blocked 0 through-the-device packets
0 IPv4 packets originated from management network
0 IPv4 packets destined to management network
0 IPv6 packets originated from management network
0 IPv6 packets destined to management network
Control Point Interface States:
Interface number is 14
Interface config status is active
Interface state is not active

------------------ show cpu usage ------------------

CPU utilization for 5 seconds = 1%; 1 minute: 0%; 5 minutes: 0%

------------------ show cpu hogging process ------------------

Process: Quack process, PROC_PC_TOTAL: 1, MAXHOG: 3, LASTHOG: 3
LASTHOG At: 23:50:56 PST Dec 20 2015
PC: 0x0000000001d212f2 (suspend)

Process: Quack process, NUMHOG: 1, MAXHOG: 3, LASTHOG: 3
LASTHOG At: 23:50:56 PST Dec 20 2015
PC: 0x0000000001d212f2 (suspend)
Call stack: 0x0000000001d212f2 0x0000000001d26760 0x0000000001d26a2a
0x0000000001d294ca 0x0000000001d2176c 0x0000000001d2345e
0x0000000001d2ad66 0x0000000001d2b339 0x00000000013a5053
0x00000000013a9723

Process: Quack process, NUMHOG: 2, MAXHOG: 4, LASTHOG: 3
LASTHOG At: 23:50:59 PST Dec 20 2015
PC: 0x00000000013a2e77 (suspend)
Call stack: 0x00000000013a315b 0x00000000013a3ac3 0x00000000013a828b

Process: Quack process, PROC_PC_TOTAL: 13, MAXHOG: 4, LASTHOG: 1
LASTHOG At: 23:50:59 PST Dec 20 2015
PC: 0x00000000013a2e77 (suspend)

Process: Quack process, NUMHOG: 11, MAXHOG: 1, LASTHOG: 1
LASTHOG At: 23:50:59 PST Dec 20 2015
PC: 0x00000000013a2e77 (suspend)
Call stack: 0x00000000013a340e 0x00000000013a3ac3 0x00000000013a828b

Process: Quack process, PROC_PC_TOTAL: 1, MAXHOG: 3, LASTHOG: 3
LASTHOG At: 23:50:59 PST Dec 20 2015
PC: 0x00000000013a62b3 (suspend)

Process: Quack process, NUMHOG: 1, MAXHOG: 3, LASTHOG: 3
LASTHOG At: 23:50:59 PST Dec 20 2015
PC: 0x00000000013a62b3 (suspend)
Call stack: 0x00000000013a62b3 0x0000000000427dd5

Process: Unicorn Admin Handler, PROC_PC_TOTAL: 1, MAXHOG: 1, LASTHOG: 1
LASTHOG At: 11:57:57 PST Dec 21 2015
PC: 0x00000000008bc780 (suspend)

Process: Unicorn Admin Handler, NUMHOG: 1, MAXHOG: 1, LASTHOG: 1
LASTHOG At: 11:57:57 PST Dec 21 2015
PC: 0x00000000008bc780 (suspend)
Call stack: 0x00000000008bc780 0x000000000097e645 0x00000000008bbad5
0x00000000008afaa4 0x000000000042e5f2 0x00000000010e7a94
0x000000000042e5f2 0x0000000000923101 0x000000000091c385
0x000000000091c5a6 0x000000000091c879 0x00000000009229a4
0x0000000000427dd5

Process: Unicorn Admin Handler, PROC_PC_TOTAL: 2, MAXHOG: 3, LASTHOG: 3
LASTHOG At: 11:57:57 PST Dec 21 2015
PC: 0x0000000001597a92 (suspend)

Process: Unicorn Admin Handler, NUMHOG: 2, MAXHOG: 3, LASTHOG: 3
LASTHOG At: 11:57:57 PST Dec 21 2015
PC: 0x0000000001597a92 (suspend)
Call stack: 0x0000000001597a92 0x0000000001597d44 0x000000000092346f
0x000000000091c385 0x000000000091c5a6 0x000000000091c879
0x00000000009229a4 0x0000000000427dd5

Process: NIC status poll, PROC_PC_TOTAL: 3, MAXHOG: 5, LASTHOG: 5
LASTHOG At: 07:40:20 PST Dec 23 2015
PC: 0x0000000001155475 (suspend)

Process: NIC status poll, NUMHOG: 3, MAXHOG: 5, LASTHOG: 5
LASTHOG At: 07:40:20 PST Dec 23 2015
PC: 0x0000000001155475 (suspend)
Call stack: 0x0000000001155475 0x0000000000427dd5

Process: tmatch compile thread, NUMHOG: 1, MAXHOG: 2, LASTHOG: 2
LASTHOG At: 00:25:27 PST Jan 11 2016
PC: 0x0000000000429d9e (suspend)
Call stack: 0x000000000063d00d 0x0000000000629240 0x00000000006323af
0x000000000062aad0 0x000000000062affd 0x0000000000629339
0x00000000006323af 0x000000000062aad0 0x0000000000634b5b
0x000000000064b53a 0x0000000000641559 0x0000000000427dd5

Process: tmatch compile thread, NUMHOG: 1, MAXHOG: 2, LASTHOG: 2
LASTHOG At: 18:09:59 PST Jan 12 2016
PC: 0x0000000000429d9e (suspend)
Call stack: 0x000000000063d00d 0x000000000062a76e 0x000000000062b3b4
0x000000000062e7f1 0x000000000063005b 0x0000000000634b5b
0x000000000064b6d9 0x0000000000641559 0x0000000000427dd5

Process: tmatch compile thread, NUMHOG: 5, MAXHOG: 2, LASTHOG: 2
LASTHOG At: 22:54:03 PST Jan 12 2016
PC: 0x0000000000429d9e (suspend)
Call stack: 0x000000000063d00d 0x0000000000634656 0x0000000000634960
0x000000000064b53a 0x0000000000641559 0x0000000000427dd5

Process: tmatch compile thread, NUMHOG: 7, MAXHOG: 2, LASTHOG: 2
LASTHOG At: 22:55:23 PST Jan 12 2016
PC: 0x0000000000429d9e (suspend)
Call stack: 0x000000000063d00d 0x000000000062a76e 0x000000000062aad0
0x000000000062e7f1 0x000000000063005b 0x0000000000634b5b
0x000000000064b53a 0x0000000000641559 0x0000000000427dd5

Process: tmatch compile thread, PROC_PC_TOTAL: 18, MAXHOG: 2, LASTHOG: 2
LASTHOG At: 23:00:23 PST Jan 12 2016
PC: 0x0000000000429d9e (suspend)

Process: tmatch compile thread, NUMHOG: 4, MAXHOG: 2, LASTHOG: 2
LASTHOG At: 23:00:23 PST Jan 12 2016
PC: 0x0000000000429d9e (suspend)
Call stack: 0x000000000063d00d 0x000000000062a76e 0x000000000062e7f1
0x000000000063005b 0x0000000000634b5b 0x000000000064b53a
0x0000000000641559 0x0000000000427dd5

Process: tmatch compile thread, PROC_PC_TOTAL: 42, MAXHOG: 2, LASTHOG: 2
LASTHOG At: 15:26:57 PST Jan 13 2016
PC: 0x0000000000640931 (suspend)

Process: tmatch compile thread, NUMHOG: 42, MAXHOG: 2, LASTHOG: 2
LASTHOG At: 15:26:57 PST Jan 13 2016
PC: 0x0000000000640931 (suspend)
Call stack: 0x0000000000640931 0x0000000000427dd5

CPU hog threshold (msec): 1.542
Last cleared: None

------------------ show process ------------------

PC SP STATE Runtime SBASE Stack Process
Mwe 0x00000000004984b2 0x00007fff2d0411c8 0x00007fff2cf51c70 0 0x00007fff2d039440 31480/32768 CMGR KVM Log 1
Mwe 0x00000000004971ef 0x00007fff2d0490b8 0x0000000003792e30 196 0x00007fff2d041490 27472/32768 CMGR KVM Image Mgmt
Lwe 0x0000000000418e8a 0x00007fff2d1a68d8 0x0000000004920290 0 0x00007fff2d19ea30 32032/32768 block_diag
Msi 0x0000000000bc437a 0x00007fff2d619948 0x0000000004920610 15385 0x00007fff2d611ac0 25504/32768 shmem setup server
Msi 0x0000000000c1005a 0x00007fff2d623378 0x0000000004920610 313 0x00007fff2d61b4b0 31952/32768 WebVPN KCD Process
Mwe 0x00000000008bf8c2 0x00007fff2d634a98 0x00007fff2e957a58 0 0x00007fff2d62ccb0 27536/32768 USB OIR POLL
Mwe 0x000000000043135d 0x00007fff2d7e2858 0x0000000004920610 0 0x00007fff2d7d2a00 64864/65536 Reload Control Thread
Mwe 0x0000000000445ba8 0x00007fff2d7f4148 0x0000000004928930 22 0x00007fff2d7ec660 28496/32768 aaa
Mwe 0x00000000015f616f 0x00007fff2f5bde28 0x0000000004920610 0 0x00007fff2d7f48f0 30912/32768 UserFromCert Thread
Mwe 0x00000000015f616f 0x00007fff2f573968 0x0000000004920610 2 0x00007fff2d7fcbf0 30608/32768 aaa_shim_thread
Mwe 0x00000000014e844e 0x00007fff2d80c938 0x00007fff37f57488 4 0x00007fff2d8050a0 30256/32768 Boot Message Proxy Process
Mwe 0x000000000048322a 0x00007fff2d81df48 0x000000000492add0 1555 0x00007fff2d80e0d0 61072/65536 CMGR Server Process
Mwe 0x00000000004857c5 0x00007fff2d8261b8 0x0000000004920610 78 0x00007fff2d81e360 31840/32768 CMGR Timer Process
Mwe 0x0000000000539f68 0x00007fff2d8570f8 0x0000000004920610 0 0x00007fff2d84f2c0 32064/32768 CTM Daemon
Mwe 0x00000000005b9655 0x00007fff2d862178 0x0000000004920610 0 0x00007fff2d85a360 31856/32768 SXP CORE
Mwe 0x00000000005b18cc 0x00007fff2d872728 0x0000000004920610 0 0x00007fff2d86a8f0 31792/32768 RBM CORE
Mwe 0x00000000005a8bc2 0x00007fff2d89cc98 0x0000000004944f30 0 0x00007fff2d88cfc0 64272/65536 cts_task
Mwe 0x00000000005aa1a5 0x00007fff2d8a50b8 0x0000000004920610 0 0x00007fff2d89d250 31936/32768 cts_timer_task
Lwe 0x0000000000674eba 0x00007fff2d996eb8 0x0000000004989640 1962 0x00007fff2d98f030 29656/32768 dbgtrace
Msi 0x00000000007042d6 0x00007fff2d9a72f8 0x0000000004920610 0 0x00007fff2d99f550 29552/32768 Environment Monitor Process
Mwe 0x00000000005e3995 0x00007fff2d9de6a8 0x0000000004920610 0 0x00007fff2d9d6850 31904/32768 cluster interface health monitor
M* 0x000000000153d2f8 0x00007fff1d551f18 0x0000000004927190 90 0x00007fff394a0d10 51592/65536 ssh
Mwe 0x00000000015f616f 0x00007fff2ea9e338 0x0000000004920610 0 0x00007fff2da57490 31424/32768 netfs_thread_init
Mwe 0x00000000010935ad 0x00007fff2da841b8 0x0000000004920610 0 0x00007fff2da74370 64432/65536 idfw_proc
Mwe 0x000000000109fbcd 0x00007fff2da94458 0x0000000004920610 0 0x00007fff2da84600 64864/65536 idfw_service
Mwe 0x00000000010ab5cd 0x00007fff2da9c678 0x0000000004920610 0 0x00007fff2da94890 31408/32768 idfw_adagent
Mwe 0x0000000001c5ede5 0x00007fff2dabd0d8 0x0000000004920610 0 0x00007fff2dab52d0 32080/32768 Chunk Manager
Msi 0x0000000001122f4f 0x00007fff2e4ef278 0x0000000004920610 2117 0x00007fff2e4e73c0 30216/32768 PIX Garbage Collector
Mwe 0x00000000010ffb25 0x00007fff2e5206e8 0x00000000046ea840 1 0x00007fff2e518850 28968/32768 IP Address Assign
Mwe 0x000000000137df9d 0x00007fff2e80d5f8 0x00000000047b68d0 0 0x00007fff2e805760 32400/32768 QoS Support Module
Mwe 0x00000000011b31e5 0x00007fff2e8158e8 0x00000000046ed450 0 0x00007fff2e80da50 32400/32768 Client Update Task
Lwe 0x0000000001d63b65 0x00007fff2e81eb78 0x0000000004920610 27138 0x00007fff2e816d20 30440/32768 Checkheaps
Mwe 0x00000000013a6205 0x00007fff2e849998 0x0000000004920610 311 0x00007fff2e839b80 50656/65536 Quack process
Mwe 0x0000000001425ce3 0x00007fff2e859c28 0x0000000004920610 309 0x00007fff2e849e10 60696/65536 Session Manager
Mwe 0x0000000001586ab5 0x00007fff2e872108 0x00007fff377ccb88 73 0x00007fff2e86a330 31560/32768 uauth
Mwe 0x0000000001510d2e 0x00007fff2e87a458 0x00000000047d2a10 0 0x00007fff2e8725c0 31872/32768 Uauth_Proxy
Msp 0x0000000001556bbd 0x00007fff2e892c38 0x0000000004920610 478 0x00007fff2e88ad70 31936/32768 SSL
Mwe 0x000000000158465a 0x00007fff2e89aed8 0x00000000047dee70 0 0x00007fff2e893060 31704/32768 SMTP
Mwe 0x000000000157e712 0x00007fff2e8a3118 0x00000000047de120 16216 0x00007fff2e89b2f0 30120/32768 Logger
Mwe 0x000000000157cd0d 0x00007fff2e8ab398 0x0000000004920610 0 0x00007fff2e8a3580 32032/32768 Syslog Retry Thread
Mwe 0x0000000001577d8d 0x00007fff2e8b3668 0x0000000004920610 0 0x00007fff2e8ab810 31840/32768 Thread Logger
Mwe 0x00000000015824f7 0x00007fff2e8ecca8 0x00000000047de820 0 0x00007fff2e8e4e20 31576/32768 syslogd
Mwe 0x00000000017f753a 0x00007fff2e925ea8 0x000000000481d670 0 0x00007fff2e91e010 31552/32768 vpnlb_thread
Mwe 0x00000000018235aa 0x00007fff2e946898 0x0000000004821790 0 0x00007fff2e93ea50 32320/32768 pci_nt_bridge
Mwe 0x000000000182a81b 0x00007fff2e94ea98 0x0000000004920610 131 0x00007fff2e946ce0 31360/32768 scansafe_poll
Mwe 0x0000000000761105 0x00007fff2ea80b58 0x0000000004920610 0 0x00007fff2ea78d30 32112/32768 TLS Proxy Inspector
Msi 0x000000000144224a 0x00007fff2eb063c8 0x0000000004920610 1061 0x00007fff2eafe510 31936/32768 emweb/cifs_timer
Mwe 0x0000000000d1e361 0x00007fff2eb5f318 0x000000000415cb90 0 0x00007fff2eb57490 32016/32768 netfs_mount_handler
Msi 0x0000000000af45c9 0x00007fff2d82e488 0x0000000004920610 4193 0x00007fff2d8265f0 31664/32768 arp_timer
Mwe 0x0000000000afec55 0x00007fff2da3e758 0x00000000049d7920 0 0x00007fff2da36940 32272/32768 arp_forward_thread
Mwe 0x0000000000c10cda 0x00007fff2e839748 0x0000000004a41d80 141 0x00007fff2e8318f0 26984/32768 Lic TMR
Mwe 0x0000000000c10a99 0x00007fff2dab4ec8 0x0000000004156300 187 0x00007fff2daad040 32048/32768 Lic HA Cluster
Mwe 0x000000000158c38b 0x00007fff2d64feb8 0x00000000047e00e0 784 0x00007fff2d648030 31936/32768 tcp_fast
Mwe 0x0000000001594455 0x00007fff2f869cc8 0x00000000047e00e0 378 0x00007fff2f861e70 30680/32768 tcp_slow
Mwe 0x00000000015d1b72 0x00007fff2f889778 0x00000000047e8280 0 0x00007fff2f881900 32352/32768 udp_timer
Mwe 0x00000000004f4705 0x00007fff2d9bfdb8 0x0000000004920610 0 0x00007fff2d9b7f60 32096/32768 CTCP Timer process
Mwe 0x0000000001795c25 0x00007fff2da67648 0x0000000004920610 0 0x00007fff2da5f810 32064/32768 L2TP data daemon
Mwe 0x0000000001798405 0x00007fff2da6f688 0x0000000004920610 0 0x00007fff2da67860 32048/32768 L2TP mgmt daemon
Mwe 0x000000000178483a 0x00007fff32420818 0x000000000480ec30 397 0x00007fff324189e0 32304/32768 ppp_timer_thread
Msi 0x00000000017f6d24 0x00007fff32428898 0x0000000004920610 2322 0x00007fff32420a30 31856/32768 vpnlb_timer_thread
Mwe 0x00000000005259ac 0x00007fff32e39e88 0x00007fff32e31ff0 200 0x00007fff32e32050 22384/32768 IPsec message handler
Msi 0x000000000054077a 0x00007fff32e42138 0x0000000004920610 36562 0x00007fff32e3a360 30120/32768 CTM message handler
Mwe 0x0000000000640931 0x00007fff32eaf338 0x00000000037a24c0 78462 0x00007fff32e6f560 246384/262144 tmatch compile thread
Mwe 0x00000000013d82c5 0x00007fff37061d18 0x0000000004920610 0 0x00007fff37059ec0 32096/32768 ICMP event handler
Mwe 0x000000000174fe15 0x00007fff37069f88 0x0000000004920610 0 0x00007fff37062150 32064/32768 Dynamic Filter VC Housekeeper
Mwe 0x0000000000f66f0b 0x00007fff3712f368 0x0000000004920610 1083 0x00007fff37127530 29416/32768 IP Background
Mwe 0x000000000129068e 0x00007fff3794e2d8 0x0000000004920610 0 0x00007fff37946490 32080/32768 Crypto CA
Mwe 0x00000000012cdd4a 0x00007fff37956578 0x0000000004920610 0 0x00007fff3794e720 32160/32768 CERT API
Mwe 0x000000000128ef65 0x00007fff37968bd8 0x0000000004920610 0 0x00007fff37960d60 32192/32768 Crypto PKI RECV
Lsi 0x00000000011393cf 0x00007fff2e956e38 0x0000000004920610 37 0x00007fff2e94ef70 31952/32768 uauth_urlb clean
Lwe 0x000000000110a03a 0x00007fff2e8fd148 0x0000000004920610 29993 0x00007fff2e8f5320 29976/32768 pm_timer_thread
Mwe 0x000000000099b985 0x00007fff2d9c7ff8 0x0000000004920610 540 0x00007fff2d9c01b0 29592/32768 IKE Common thread
Mwe 0x00000000009d0615 0x00007fff37a51d88 0x0000000004920610 5882 0x00007fff37a4a010 29880/32768 IKE Timekeeper
Mwe 0x00000000009c0a4a 0x00007fff37a65b38 0x000000000414f6b0 7392 0x00007fff37a56000 55448/65536 IKE Daemon
Mwe 0x0000000000a6c5fd 0x00007fff37a6dac8 0x0000000004920610 285 0x00007fff37a66050 29728/32768 IKEv2 Daemon
Mwe 0x0000000000a6bc46 0x00007fff37a75ec8 0x0000000004920610 560 0x00007fff37a6e0a0 31856/32768 IKEv2 DPD Client Process
Mwe 0x0000000001529e2d 0x00007fff37ad61f8 0x00000000047db6a0 0 0x00007fff37ace380 32368/32768 RADIUS Proxy Event Daemon
Mwe 0x00000000014e844e 0x00007fff37addd78 0x00007fff2da9cfb8 4 0x00007fff37ad63d0 30528/32768 RADIUS Proxy Listener
Mwe 0x0000000001529415 0x00007fff37ae6278 0x0000000004920610 0 0x00007fff37ade420 32096/32768 RADIUS Proxy Time Keeper
Mwe 0x0000000000ae2aba 0x00007fff37aee1c8 0x00000000049d78b0 0 0x00007fff37ae6470 31392/32768 Integrity FW Task
Mrd 0x000000000076b6c8 0x00007fff37b44e08 0x0000000004927190 12021 0x00007fff37b3cfc0 23992/32768 CP Processing
Mrd 0x000000000076bab8 0x00007fff37b54e68 0x0000000004927190 82 0x00007fff37b45010 63352/65536 CP Midpath Processing
Mrd 0x000000000076b99a 0x00007fff37b5cff8 0x0000000004927190 0 0x00007fff37b551a0 30568/32768 CP Crypto Result Processing
Mrd 0x000000000076b8aa 0x00007fff37b65288 0x0000000004927190 0 0x00007fff37b5d430 30616/32768 SRTP Processing
Mrd 0x000000000076b7bf 0x00007fff37b6d518 0x0000000004927190 0 0x00007fff37b656c0 30600/32768 CP HA Processing
Mrd 0x000000000076bcea 0x00007fff37b757a8 0x0000000004927190 43 0x00007fff37b6d950 30584/32768 CP ARP Processing
Mrd 0x000000000076bc07 0x00007fff37b7da38 0x0000000004927190 0 0x00007fff37b75be0 30568/32768 CP DP CXSC Event Processing
Mrd 0x000000000076bdcf 0x00007fff37b85cc8 0x0000000004927190 0 0x00007fff37b7de70 30616/32768 CP Threat-Detection Processing
Mwe 0x000000000069448e 0x00007fff37c49478 0x0000000002f01988 0 0x00007fff37c09eb0 254680/262144 ci/console
Msi 0x00000000008fb73e 0x00007fff2d83e988 0x0000000004920610 949 0x00007fff2d836b10 30104/32768 fover_thread
Mwe 0x0000000001769ccf 0x00007fff37c51d48 0x0000000004e68ed0 64 0x00007fff37c49f00 32000/32768 lu_ctl
Msi 0x00000000011550da 0x00007fff37c59e28 0x0000000004920610 84908 0x00007fff37c51f50 28216/32768 update_cpu_usage
Mwe 0x00000000015a54dd 0x00007fff37c61d38 0x0000000004920610 105 0x00007fff37c59fa0 29320/32768 npshim_thread
Msi 0x000000000115517a 0x00007fff37c79db8 0x0000000004920610 0 0x00007fff37c72040 28992/32768 NIC status poll
Mwe 0x00000000008f5fb2 0x00007fff37c99fd8 0x00000000049cf9a0 0 0x00007fff37c92180 32336/32768 fover_rx
Mwe 0x00000000008f79b8 0x00007fff37ca1f38 0x00000000049cfdf0 0 0x00007fff37c9a1d0 32096/32768 fover_tx
Mwe 0x00000000008f79b8 0x00007fff37ca9f88 0x00000000049cfe00 0 0x00007fff37ca2220 32096/32768 fover_tx_2
Mwe 0x00000000008e8e32 0x00007fff37cb1f78 0x00000000049d83b0 0 0x00007fff37caa270 31968/32768 fover_ip
Mwe 0x000000000090063a 0x00007fff37cb9f28 0x00000000049cfe28 0 0x00007fff37cb22c0 31840/32768 fover_rep
Mwe 0x00000000008f5e9f 0x00007fff37cc9e28 0x00000000049cfe38 1054 0x00007fff37cba310 64272/65536 fover_parse
Mwe 0x00000000008d6455 0x00007fff37cd21b8 0x0000000004920610 0 0x00007fff37cca360 32096/32768 fover_fail_check
Mwe 0x00000000008d4515 0x00007fff37cda208 0x00000000049d0550 380 0x00007fff37cd23b0 32336/32768 fover_ifc_test
Mwe 0x00000000008d8156 0x00007fff37ce2238 0x0000000004920610 0 0x00007fff37cda400 32064/32768 fover_health_monitoring_thread
Mwe 0x0000000000911002 0x00007fff37cf1ab8 0x0000000004920610 0 0x00007fff37ce9ca0 32032/32768 ha_trans_ctl_tx
Mwe 0x0000000000911002 0x00007fff37d35b58 0x0000000004920610 0 0x00007fff37d2dd40 32032/32768 ha_trans_data_tx
Mwe 0x000000000090782d 0x00007fff37d45be8 0x0000000004920610 0 0x00007fff37d35d90 64672/65536 fover_FSM_thread
Mwe 0x0000000001769bc6 0x00007fff37d55c78 0x00000000049d8330 0 0x00007fff37d45de0 64896/65536 lu_rx
Lwe 0x0000000001769c02 0x00007fff37d5dcd8 0x0000000004e68e70 0 0x00007fff37d55e30 32416/32768 lu_dynamic_sync
Mwe 0x0000000000aee1dd 0x00007fff37dddfb8 0x00000000049d8480 267 0x00007fff37dce160 63944/65536 IP Thread
Mwe 0x0000000000af5ebd 0x00007fff37de6028 0x00000000049d7900 820 0x00007fff37dde1b0 29976/32768 ARP Thread
Mwe 0x000000000093cfcd 0x00007fff37deded8 0x00000000049d8420 135 0x00007fff37de6200 31208/32768 icmp_thread
Mwe 0x00000000015d292c 0x00007fff37df6058 0x0000000004920610 27 0x00007fff37dee250 32080/32768 udp_thread
Mwe 0x000000000158f86d 0x00007fff37dfdc98 0x00000000049d8520 0 0x00007fff37df62a0 31216/32768 tcp_thread
Mwe 0x00000000004de841 0x00007fff37e06168 0x00000000037987b0 8764 0x00007fff37dfe2f0 32000/32768 cppoll
Mwe 0x000000000159282e 0x00007fff37e0df28 0x00007fff32e58b40 0 0x00007fff37e06340 31192/32768 CP Server Process
Mwe 0x0000000001c849e6 0x00007fff37c81e28 0x0000000004887e00 0 0x00007fff37c7a090 31400/32768 rpc_server
Mwe 0x00000000015f616f 0x00007fff37e84278 0x0000000004920610 59 0x00007fff37e0e390 58784/65536 rtcli async executor process
Mwe 0x0000000001474d0a 0x00007fff382a1608 0x00000000047c12d0 92 0x00007fff38299790 32128/32768 SNMP Notify Thread
Mwe 0x00000000006f67b1 0x00007fff386c67e8 0x0000000004920610 282 0x00007fff386bed00 29904/32768 emweb/https
Mwe 0x00000000006ea055 0x00007fff386cfd08 0x0000000004920610 127 0x00007fff386c7ea0 31856/32768 Timekeeper
Mwe 0x00000000015f616f 0x00007fff38831d28 0x0000000004920610 914 0x00007fff38758380 30656/32768 Unicorn Proxy Thread
Mwe 0x00000000014e844e 0x00007fff38cb1628 0x00007fff38befa78 4 0x00007fff38ca9ca0 30496/32768 EAPoUDP-sock
Mwe 0x00000000006bbe75 0x00007fff38cb97b8 0x0000000004920610 0 0x00007fff38cb1cf0 31184/32768 EAPoUDP
Mwe 0x00000000014e844e 0x00007fff38ce92c8 0x00007fff2e82bc18 143 0x00007fff38ce1a60 30208/32768 IKE Receiver
Mwe 0x000000000159c480 0x00007fff38d018f8 0x00007fff37571f48 0 0x00007fff38cf9c60 30864/32768 listen/telnet
Mwe 0x000000000159c480 0x00007fff38d10728 0x00007fff38373538 2 0x00007fff38d08a90 30864/32768 listen/ssh
Mwe 0x000000000069cc1c 0x00007fff38d1ecc8 0x0000000004920610 42 0x00007fff38d16e60 31856/32768 DHCPD Timer
Mwe 0x000000000069e734 0x00007fff38d2bd38 0x0000000004920610 0 0x00007fff38d23f60 31000/32768 dhcp_daemon
Mwe 0x00000000017d80f3 0x00007fff39003d38 0x000000000481d110 0 0x00007fff38ff3ea0 65168/65536 vpnfol_thread_msg
Msi 0x00000000017d8bc5 0x00007fff3900bd98 0x0000000004920610 1569 0x00007fff39003ef0 31920/32768 vpnfol_thread_timer
Mwe 0x00000000017d81a8 0x00007fff39013d58 0x000000000481d1a0 0 0x00007fff3900bf40 32272/32768 vpnfol_thread_sync
Msi 0x00000000017d8d33 0x00007fff3901c5d8 0x0000000004920610 7901 0x00007fff39014730 30168/32768 vpnfol_thread_unsent
Mwe 0x0000000000adf4c5 0x00007fff2e936398 0x0000000004920610 0 0x00007fff2e92e530 32112/32768 Integrity Fw Timer Thread
Msi 0x0000000000d1e6b3 0x00007fff37c89f78 0x0000000004920610 152 0x00007fff37c820e0 31904/32768 netfs_vnode_reclaim
Mwe 0x000000000154221d 0x00007fff379cc068 0x0000000004920610 2 0x00007fff379c4210 28272/32768 ssh/timer
Mwe 0x00000000010e5eb3 0x00007fff391f4288 0x00007fff3835f010 29178 0x00007fff391b4b30 257240/262144 Unicorn Admin Handler
Mwe 0x00000000010e5195 0x00007fff39234188 0x0000000004920610 37031 0x00007fff391f4b80 253608/262144 Unicorn Admin Handler
Mwe 0x000000000135225f 0x00007fff3923ca28 0x0000000004d97770 241 0x00007fff39234bd0 32112/32768 qos_metric_daemon
- - - - 574724 - - DATAPATH-0-1229
- - - - 2047744770 - - scheduler
- - - - 2048780624 - - total elapsed

------------------ show kernel process ------------------

PID PPID PRI NI VSIZE RSS WCHAN STAT RUNTIME GTIME CGTIME COMMAND
1 0 20 0 6815744 692 18446744071564396473 S 178 0 0 init
2 0 15 - 5 0 0 18446744071564457931 S 0 0 0 kthreadd
3 2 RT - 5 0 0 18446744071564373382 S 0 0 0 migration/0
4 2 15 - 5 0 0 18446744071564403243 S 0 0 0 ksoftirqd/0
5 2 RT - 5 0 0 18446744071564564807 S 0 0 0 watchdog/0
6 2 RT - 5 0 0 18446744071564373382 S 0 0 0 migration/1
7 2 15 - 5 0 0 18446744071564403243 S 0 0 0 ksoftirqd/1
8 2 RT - 5 0 0 18446744071564564807 S 0 0 0 watchdog/1
9 2 RT - 5 0 0 18446744071564373382 S 0 0 0 migration/2
10 2 15 - 5 0 0 18446744071564403243 S 4 0 0 ksoftirqd/2
11 2 RT - 5 0 0 18446744071564564807 S 0 0 0 watchdog/2
12 2 RT - 5 0 0 18446744071564373382 S 0 0 0 migration/3
13 2 15 - 5 0 0 18446744071564403243 S 0 0 0 ksoftirqd/3
14 2 RT - 5 0 0 18446744071564564807 S 0 0 0 watchdog/3
15 2 15 - 5 0 0 18446744071564444777 S 0 0 0 cpuset
16 2 15 - 5 0 0 18446744071564444777 S 0 0 0 events/0
17 2 15 - 5 0 0 18446744071564444777 S 0 0 0 events/1
18 2 15 - 5 0 0 18446744071564444777 S 0 0 0 events/2
19 2 15 - 5 0 0 18446744071564444777 S 0 0 0 events/3
20 2 15 - 5 0 0 18446744071564444777 S 1 0 0 work_on_cpu/0
21 2 15 - 5 0 0 18446744071564444777 S 0 0 0 work_on_cpu/1
22 2 15 - 5 0 0 18446744071564444777 S 0 0 0 work_on_cpu/2
23 2 15 - 5 0 0 18446744071564444777 S 0 0 0 work_on_cpu/3
24 2 15 - 5 0 0 18446744071564444777 S 0 0 0 khelper
128 2 15 - 5 0 0 18446744071564444777 S 0 0 0 kblockd/0
129 2 15 - 5 0 0 18446744071564444777 S 0 0 0 kblockd/1
130 2 15 - 5 0 0 18446744071564444777 S 0 0 0 kblockd/2
131 2 15 - 5 0 0 18446744071564444777 S 0 0 0 kblockd/3
132 2 15 - 5 0 0 18446744071564444777 S 0 0 0 kacpid
133 2 15 - 5 0 0 18446744071564444777 S 0 0 0 kacpi_notify
244 2 15 - 5 0 0 18446744071564444777 S 0 0 0 ksuspend_usbd
250 2 15 - 5 0 0 18446744071566218464 S 0 0 0 khubd
253 2 15 - 5 0 0 18446744071566413659 S 0 0 0 kseriod
335 2 20 0 0 0 18446744071564642846 S 0 0 0 pdflush
336 2 20 0 0 0 18446744071564642846 S 0 0 0 pdflush
337 2 15 - 5 0 0 18446744071564658741 S 0 0 0 kswapd0
338 2 15 - 5 0 0 18446744071564444777 S 0 0 0 aio/0
339 2 15 - 5 0 0 18446744071564444777 S 0 0 0 aio/1
340 2 15 - 5 0 0 18446744071564444777 S 0 0 0 aio/2
341 2 15 - 5 0 0 18446744071564444777 S 0 0 0 aio/3
342 2 15 - 5 0 0 18446744071564444777 S 0 0 0 nfsiod
483 2 39 19 0 0 18446744071565914211 S 4122933 0 0 kipmi0
587 2 15 - 5 0 0 18446744071564444777 S 0 0 0 hid_compat
597 2 15 - 5 0 0 18446744071564444777 S 0 0 0 rpciod/0
598 2 15 - 5 0 0 18446744071564444777 S 0 0 0 rpciod/1
599 2 15 - 5 0 0 18446744071564444777 S 0 0 0 rpciod/2
600 2 15 - 5 0 0 18446744071564444777 S 0 0 0 rpciod/3
621 1 16 - 4 6475776 936 18446744071564847941 S 1 0 0 udevd
629 2 15 - 5 0 0 18446744071566128435 S 0 0 0 scsi_eh_0
630 2 15 - 5 0 0 18446744071566372042 S 1 0 0 usb-storage
761 621 18 - 2 6467584 944 18446744071564847941 S 0 0 0 udevd
764 621 18 - 2 6471680 900 18446744071564847941 S 0 0 0 udevd
1165 1 20 0 78454784 1960 18446744073709551615 S 0 0 0 lwsmd
1167 1165 20 0 113819648 4840 18446744073709551615 S 13 0 0 lwregd
1222 1 20 0 6819840 608 18446744071564396473 S 0 0 0 sh
1223 1222 20 0 14475264 596 18446744073709551615 S 0 0 0 lina_monitor
1225 1223 0 -20 3904417792 3508124 18446744073709551615 S 204806439 0 0 lina

------------------ show kernel cgroup-controller detail ------------------

memory controller:
-----------------
memory.limit_in_bytes: unlimited
memory.usage_in_bytes: 95911936 (1%)
memory.max_usage_in_bytes: 193544192 (2%)
memory.failcnt: 0
tasks:

group "normal"
memory.limit_in_bytes: unlimited
memory.usage_in_bytes: 270336 (0%)
memory.max_usage_in_bytes: 917504 (0%)
memory.failcnt: 0
tasks:
PID RSS COMMAND
1 708608 init
2 0 kthreadd
3 0 migration/0
4 0 ksoftirqd/0
5 0 watchdog/0
6 0 migration/1
7 0 ksoftirqd/1
8 0 watchdog/1
9 0 migration/2
10 0 ksoftirqd/2
11 0 watchdog/2
12 0 migration/3
13 0 ksoftirqd/3
14 0 watchdog/3
15 0 cpuset
16 0 events/0
17 0 events/1
18 0 events/2
19 0 events/3
20 0 work_on_cpu/0
21 0 work_on_cpu/1
22 0 work_on_cpu/2
23 0 work_on_cpu/3
24 0 khelper
128 0 kblockd/0
129 0 kblockd/1
130 0 kblockd/2
131 0 kblockd/3
132 0 kacpid
133 0 kacpi_notify
244 0 ksuspend_usbd
250 0 khubd
253 0 kseriod
335 0 pdflush
336 0 pdflush
337 0 kswapd0
338 0 aio/0
339 0 aio/1
340 0 aio/2
341 0 aio/3
342 0 nfsiod
483 0 kipmi0
587 0 hid_compat
597 0 rpciod/0
598 0 rpciod/1
599 0 rpciod/2
600 0 rpciod/3
621 958464 udevd
629 0 scsi_eh_0
630 0 usb-storage
761 966656 udevd
764 921600 udevd
1222 622592 sh

group "privileged"
memory.limit_in_bytes: 4001173504 (50%)
memory.usage_in_bytes: 3556605952 (44%)
memory.max_usage_in_bytes: 3556610048 (44%)
memory.failcnt: 0
tasks:
PID RSS COMMAND
1223 610304 lina_monitor
1224 0 lina_monitor
1225 3592327168 lina
1226 0 lina
1227 0 lina
1228 0 lina
1229 0 lina

group "restricted"
memory.limit_in_bytes: 23068672 (0%)
memory.usage_in_bytes: 2551808 (0%)
memory.max_usage_in_bytes: 2621440 (0%)
memory.failcnt: 0
tasks:
PID RSS COMMAND
1165 2007040 lwsmd
1166 0 lwsmd
1167 4956160 lwregd
1169 0 lwregd
1170 0 lwregd
1171 0 lwregd
1172 0 lwregd
1173 0 lwregd
1174 0 lwregd
1175 0 lwregd
1176 0 lwregd
1177 0 lwregd
1178 0 lwregd
1179 0 lwregd
1180 0 lwregd
1181 0 lwregd
1182 0 lwregd
1183 0 lwregd
1184 0 lwregd
1185 0 lwregd
1186 0 lwregd
1187 0 lwregd
1188 0 lwregd
1189 0 lwsmd
1190 0 lwsmd
1191 0 lwsmd
1192 0 lwsmd
1193 0 lwsmd
1194 0 lwsmd
1195 0 lwsmd
1196 0 lwsmd
1197 0 lwsmd
1198 0 lwsmd
1199 0 lwsmd
1200 0 lwsmd
1201 0 lwsmd
1202 0 lwsmd
1203 0 lwsmd
1204 0 lwsmd
1205 0 lwsmd
1206 0 lwsmd
1207 0 lwsmd
1208 0 lwsmd

group "qemu"
memory.limit_in_bytes: 4024242176 (50%)
memory.usage_in_bytes: 0
memory.max_usage_in_bytes: 0
memory.failcnt: 0
tasks:

cpu controller:
---------------
cpu.shares: 1024
cpuacct.usage: 2095837676570608
cpuacct.usage_percpu:
cpu0: 2048067319801334
cpu1: 47747598616050
cpu2: 9948034584
cpu3: 12810118640
tasks:
PID RSS COMMAND
3 0 migration/0
5 0 watchdog/0
6 0 migration/1
8 0 watchdog/1
9 0 migration/2
11 0 watchdog/2
12 0 migration/3
14 0 watchdog/3

group "normal"
cpu.shares: 4915
cpuacct.usage: 47841049010322 (2%)
cpuacct.usage_percpu:
cpu0: 71808076233 (0%)
cpu1: 47746649131389 (100%)
cpu2: 9853814374 (99%)
cpu3: 12737988326 (99%)
tasks:
PID RSS COMMAND
1 708608 init
2 0 kthreadd
4 0 ksoftirqd/0
7 0 ksoftirqd/1
10 0 ksoftirqd/2
13 0 ksoftirqd/3
15 0 cpuset
16 0 events/0
17 0 events/1
18 0 events/2
19 0 events/3
20 0 work_on_cpu/0
21 0 work_on_cpu/1
22 0 work_on_cpu/2
23 0 work_on_cpu/3
24 0 khelper
128 0 kblockd/0
129 0 kblockd/1
130 0 kblockd/2
131 0 kblockd/3
132 0 kacpid
133 0 kacpi_notify
244 0 ksuspend_usbd
250 0 khubd
253 0 kseriod
335 0 pdflush
336 0 pdflush
337 0 kswapd0
338 0 aio/0
339 0 aio/1
340 0 aio/2
341 0 aio/3
342 0 nfsiod
483 0 kipmi0
587 0 hid_compat
597 0 rpciod/0
598 0 rpciod/1
599 0 rpciod/2
600 0 rpciod/3
621 958464 udevd
629 0 scsi_eh_0
630 0 usb-storage
761 966656 udevd
764 921600 udevd
1222 622592 sh
1223 610304 lina_monitor
1224 0 lina_monitor
1225 3592327168 lina
1226 0 lina
1227 0 lina
1228 0 lina

group "privileged"
cpu.shares: 78640
cpuacct.usage: 2047993172202016 (98%)
cpuacct.usage_percpu:
cpu0: 2047993172202016 (100%)
cpu1: 0
cpu2: 0
cpu3: 0
tasks:
PID RSS COMMAND
1229 0 lina

group "restricted"
cpu.shares: 1024
cpuacct.usage: 105249932 (0%)
cpuacct.usage_percpu:
cpu0: 105249932 (0%)
cpu1: 0
cpu2: 0
cpu3: 0
tasks:
PID RSS COMMAND
1165 2007040 lwsmd
1166 0 lwsmd
1167 4956160 lwregd
1169 0 lwregd
1170 0 lwregd
1171 0 lwregd
1172 0 lwregd
1173 0 lwregd
1174 0 lwregd
1175 0 lwregd
1176 0 lwregd
1177 0 lwregd
1178 0 lwregd
1179 0 lwregd
1180 0 lwregd
1181 0 lwregd
1182 0 lwregd
1183 0 lwregd
1184 0 lwregd
1185 0 lwregd
1186 0 lwregd
1187 0 lwregd
1188 0 lwregd
1189 0 lwsmd
1190 0 lwsmd
1191 0 lwsmd
1192 0 lwsmd
1193 0 lwsmd
1194 0 lwsmd
1195 0 lwsmd
1196 0 lwsmd
1197 0 lwsmd
1198 0 lwsmd
1199 0 lwsmd
1200 0 lwsmd
1201 0 lwsmd
1202 0 lwsmd
1203 0 lwsmd
1204 0 lwsmd
1205 0 lwsmd
1206 0 lwsmd
1207 0 lwsmd
1208 0 lwsmd

cpuset controller:
-----------------
cpuset.cpus: 0-3
cpuset.mems: 0
tasks:

group "normal"
cpuset.cpus: 0-3
cpuset.mems: 0
tasks:
PID RSS COMMAND
1 708608 init
2 0 kthreadd
15 0 cpuset
24 0 khelper
132 0 kacpid
133 0 kacpi_notify
244 0 ksuspend_usbd
250 0 khubd
253 0 kseriod
335 0 pdflush
336 0 pdflush
337 0 kswapd0
342 0 nfsiod
483 0 kipmi0
587 0 hid_compat
621 958464 udevd
629 0 scsi_eh_0
630 0 usb-storage
761 966656 udevd
764 921600 udevd
1222 622592 sh

group "restricted"
cpuset.cpus: 0-3
cpuset.mems: 0
tasks:

group "restricted/cpu0"
cpuset.cpus: 0
cpuset.mems: 0
tasks:
PID RSS COMMAND
3 0 migration/0
4 0 ksoftirqd/0
5 0 watchdog/0
16 0 events/0
20 0 work_on_cpu/0
128 0 kblockd/0
338 0 aio/0
597 0 rpciod/0
1229 0 lina

group "restricted/cpu1"
cpuset.cpus: 1
cpuset.mems: 0
tasks:
PID RSS COMMAND
6 0 migration/1
7 0 ksoftirqd/1
8 0 watchdog/1
17 0 events/1
21 0 work_on_cpu/1
129 0 kblockd/1
339 0 aio/1
598 0 rpciod/1

group "restricted/cpu2"
cpuset.cpus: 2
cpuset.mems: 0
tasks:
PID RSS COMMAND
9 0 migration/2
10 0 ksoftirqd/2
11 0 watchdog/2
18 0 events/2
22 0 work_on_cpu/2
130 0 kblockd/2
340 0 aio/2
599 0 rpciod/2

group "restricted/cpu3"
cpuset.cpus: 3
cpuset.mems: 0
tasks:
PID RSS COMMAND
12 0 migration/3
13 0 ksoftirqd/3
14 0 watchdog/3
19 0 events/3
23 0 work_on_cpu/3
131 0 kblockd/3
341 0 aio/3
600 0 rpciod/3

group "restricted/lina"
cpuset.cpus: 0
cpuset.mems: 0
tasks:
PID RSS COMMAND
1165 2007040 lwsmd
1166 0 lwsmd
1167 4956160 lwregd
1169 0 lwregd
1170 0 lwregd
1171 0 lwregd
1172 0 lwregd
1173 0 lwregd
1174 0 lwregd
1175 0 lwregd
1176 0 lwregd
1177 0 lwregd
1178 0 lwregd
1179 0 lwregd
1180 0 lwregd
1181 0 lwregd
1182 0 lwregd
1183 0 lwregd
1184 0 lwregd
1185 0 lwregd
1186 0 lwregd
1187 0 lwregd
1188 0 lwregd
1189 0 lwsmd
1190 0 lwsmd
1191 0 lwsmd
1192 0 lwsmd
1193 0 lwsmd
1194 0 lwsmd
1195 0 lwsmd
1196 0 lwsmd
1197 0 lwsmd
1198 0 lwsmd
1199 0 lwsmd
1200 0 lwsmd
1201 0 lwsmd
1202 0 lwsmd
1203 0 lwsmd
1204 0 lwsmd
1205 0 lwsmd
1206 0 lwsmd
1207 0 lwsmd
1208 0 lwsmd
1223 610304 lina_monitor
1224 0 lina_monitor
1225 3592327168 lina
1226 0 lina
1227 0 lina
1228 0 lina

group "restricted/qemu"
cpuset.cpus: 1-3
cpuset.mems: 0
tasks:

------------------ show failover ------------------

Failover Off
Failover unit Secondary
Failover LAN Interface: not Configured
Unit Poll frequency 1 seconds, holdtime 15 seconds
Interface Poll frequency 5 seconds, holdtime 25 seconds
Interface Policy 1
Monitored Interfaces 3 of 216 maximum

------------------ show failover history ------------------

==========================================================================
From State To State Reason
==========================================================================
23:50:51 PST Dec 20 2015
Not Detected Disabled No Error

==========================================================================

------------------ show traffic ------------------

Outside1:
received (in 2048057.640 secs):
44732907 packets 40105673438 bytes
0 pkts/sec 19001 bytes/sec
transmitted (in 2048057.640 secs):
32381859 packets 7598724824 bytes
1 pkts/sec 3001 bytes/sec
1 minute input rate 16 pkts/sec, 3277 bytes/sec
1 minute output rate 15 pkts/sec, 2346 bytes/sec
1 minute drop rate, 0 pkts/sec
5 minute input rate 396 pkts/sec, 461597 bytes/sec
5 minute output rate 227 pkts/sec, 26940 bytes/sec
5 minute drop rate, 2 pkts/sec
Inside:
received (in 2048057.650 secs):
35446495 packets 7304829025 bytes
0 pkts/sec 3000 bytes/sec
transmitted (in 2048057.650 secs):
50015384 packets 41286055123 bytes
1 pkts/sec 20001 bytes/sec
1 minute input rate 17 pkts/sec, 2232 bytes/sec
1 minute output rate 22 pkts/sec, 4987 bytes/sec
1 minute drop rate, 0 pkts/sec
5 minute input rate 238 pkts/sec, 27090 bytes/sec
5 minute output rate 414 pkts/sec, 464308 bytes/sec
5 minute drop rate, 1 pkts/sec
management:
received (in 2048057.790 secs):
0 packets 0 bytes
0 pkts/sec 0 bytes/sec
transmitted (in 2048057.790 secs):
1 packets 28 bytes
0 pkts/sec 0 bytes/sec
1 minute input rate 0 pkts/sec, 0 bytes/sec
1 minute output rate 0 pkts/sec, 0 bytes/sec
1 minute drop rate, 0 pkts/sec
5 minute input rate 0 pkts/sec, 0 bytes/sec
5 minute output rate 0 pkts/sec, 0 bytes/sec
5 minute drop rate, 0 pkts/sec

----------------------------------------
Aggregated Traffic on Physical Interface
----------------------------------------
GigabitEthernet0/0:
received (in 2048057.940 secs):
44766012 packets 40930392242 bytes
0 pkts/sec 19001 bytes/sec
transmitted (in 2048057.940 secs):
32381902 packets 8240218827 bytes
1 pkts/sec 4000 bytes/sec
1 minute input rate 16 pkts/sec, 3591 bytes/sec
1 minute output rate 15 pkts/sec, 2657 bytes/sec
1 minute drop rate, 0 pkts/sec
5 minute input rate 396 pkts/sec, 468773 bytes/sec
5 minute output rate 227 pkts/sec, 32132 bytes/sec
5 minute drop rate, 0 pkts/sec
GigabitEthernet0/1:
received (in 2048057.950 secs):
35446541 packets 8028887121 bytes
0 pkts/sec 3001 bytes/sec
transmitted (in 2048057.950 secs):
50015384 packets 42208378618 bytes
1 pkts/sec 20000 bytes/sec
1 minute input rate 17 pkts/sec, 2600 bytes/sec
1 minute output rate 22 pkts/sec, 5411 bytes/sec
1 minute drop rate, 0 pkts/sec
5 minute input rate 238 pkts/sec, 32550 bytes/sec
5 minute output rate 414 pkts/sec, 471815 bytes/sec
5 minute drop rate, 0 pkts/sec
GigabitEthernet0/2:
received (in 2048058.090 secs):
0 packets 0 bytes
0 pkts/sec 0 bytes/sec
transmitted (in 2048058.090 secs):
0 packets 0 bytes
0 pkts/sec 0 bytes/sec
1 minute input rate 0 pkts/sec, 0 bytes/sec
1 minute output rate 0 pkts/sec, 0 bytes/sec
1 minute drop rate, 0 pkts/sec
5 minute input rate 0 pkts/sec, 0 bytes/sec
5 minute output rate 0 pkts/sec, 0 bytes/sec
5 minute drop rate, 0 pkts/sec
GigabitEthernet0/3:
received (in 2048058.110 secs):
0 packets 0 bytes
0 pkts/sec 0 bytes/sec
transmitted (in 2048058.110 secs):
0 packets 0 bytes
0 pkts/sec 0 bytes/sec
1 minute input rate 0 pkts/sec, 0 bytes/sec
1 minute output rate 0 pkts/sec, 0 bytes/sec
1 minute drop rate, 0 pkts/sec
5 minute input rate 0 pkts/sec, 0 bytes/sec
5 minute output rate 0 pkts/sec, 0 bytes/sec
5 minute drop rate, 0 pkts/sec
GigabitEthernet0/4:
received (in 2048058.250 secs):
0 packets 0 bytes
0 pkts/sec 0 bytes/sec
transmitted (in 2048058.250 secs):
0 packets 0 bytes
0 pkts/sec 0 bytes/sec
1 minute input rate 0 pkts/sec, 0 bytes/sec
1 minute output rate 0 pkts/sec, 0 bytes/sec
1 minute drop rate, 0 pkts/sec
5 minute input rate 0 pkts/sec, 0 bytes/sec
5 minute output rate 0 pkts/sec, 0 bytes/sec
5 minute drop rate, 0 pkts/sec
GigabitEthernet0/5:
received (in 2048058.390 secs):
0 packets 0 bytes
0 pkts/sec 0 bytes/sec
transmitted (in 2048058.390 secs):
0 packets 0 bytes
0 pkts/sec 0 bytes/sec
1 minute input rate 0 pkts/sec, 0 bytes/sec
1 minute output rate 0 pkts/sec, 0 bytes/sec
1 minute drop rate, 0 pkts/sec
5 minute input rate 0 pkts/sec, 0 bytes/sec
5 minute output rate 0 pkts/sec, 0 bytes/sec
5 minute drop rate, 0 pkts/sec
GigabitEthernet0/6:
received (in 2048058.410 secs):
0 packets 0 bytes
0 pkts/sec 0 bytes/sec
transmitted (in 2048058.410 secs):
0 packets 0 bytes
0 pkts/sec 0 bytes/sec
1 minute input rate 0 pkts/sec, 0 bytes/sec
1 minute output rate 0 pkts/sec, 0 bytes/sec
1 minute drop rate, 0 pkts/sec
5 minute input rate 0 pkts/sec, 0 bytes/sec
5 minute output rate 0 pkts/sec, 0 bytes/sec
5 minute drop rate, 0 pkts/sec
GigabitEthernet0/7:
received (in 2048058.550 secs):
0 packets 0 bytes
0 pkts/sec 0 bytes/sec
transmitted (in 2048058.550 secs):
0 packets 0 bytes
0 pkts/sec 0 bytes/sec
1 minute input rate 0 pkts/sec, 0 bytes/sec
1 minute output rate 0 pkts/sec, 0 bytes/sec
1 minute drop rate, 0 pkts/sec
5 minute input rate 0 pkts/sec, 0 bytes/sec
5 minute output rate 0 pkts/sec, 0 bytes/sec
5 minute drop rate, 0 pkts/sec
Internal-Control0/0:
received (in 2048058.560 secs):
0 packets 0 bytes
0 pkts/sec 0 bytes/sec
transmitted (in 2048058.560 secs):
1053067 packets 57002170 bytes
0 pkts/sec 0 bytes/sec
1 minute input rate 0 pkts/sec, 0 bytes/sec
1 minute output rate 0 pkts/sec, 27 bytes/sec
1 minute drop rate, 0 pkts/sec
5 minute input rate 0 pkts/sec, 0 bytes/sec
5 minute output rate 0 pkts/sec, 27 bytes/sec
5 minute drop rate, 0 pkts/sec
Internal-Data0/0:
received (in 2048058.700 secs):
0 packets 0 bytes
0 pkts/sec 0 bytes/sec
transmitted (in 2048058.700 secs):
0 packets 0 bytes
0 pkts/sec 0 bytes/sec
1 minute input rate 0 pkts/sec, 0 bytes/sec
1 minute output rate 0 pkts/sec, 0 bytes/sec
1 minute drop rate, 0 pkts/sec
5 minute input rate 0 pkts/sec, 0 bytes/sec
5 minute output rate 0 pkts/sec, 0 bytes/sec
5 minute drop rate, 0 pkts/sec
Internal-Data0/1:
received (in 2048058.840 secs):
0 packets 0 bytes
0 pkts/sec 0 bytes/sec
transmitted (in 2048058.840 secs):
0 packets 0 bytes
0 pkts/sec 0 bytes/sec
1 minute input rate 0 pkts/sec, 0 bytes/sec
1 minute output rate 0 pkts/sec, 0 bytes/sec
1 minute drop rate, 0 pkts/sec
5 minute input rate 0 pkts/sec, 0 bytes/sec
5 minute output rate 0 pkts/sec, 0 bytes/sec
5 minute drop rate, 0 pkts/sec
Internal-Data0/2:
received (in 2048058.860 secs):
1 packets 42 bytes
0 pkts/sec 0 bytes/sec
transmitted (in 2048058.860 secs):
0 packets 0 bytes
0 pkts/sec 0 bytes/sec
1 minute input rate 0 pkts/sec, 0 bytes/sec
1 minute output rate 0 pkts/sec, 0 bytes/sec
1 minute drop rate, 0 pkts/sec
5 minute input rate 0 pkts/sec, 0 bytes/sec
5 minute output rate 0 pkts/sec, 0 bytes/sec
5 minute drop rate, 0 pkts/sec
Management0/0:
received (in 2048059.150 secs):
0 packets 0 bytes
0 pkts/sec 0 bytes/sec
transmitted (in 2048059.150 secs):
1 packets 42 bytes
0 pkts/sec 0 bytes/sec
1 minute input rate 0 pkts/sec, 0 bytes/sec
1 minute output rate 0 pkts/sec, 0 bytes/sec
1 minute drop rate, 0 pkts/sec
5 minute input rate 0 pkts/sec, 0 bytes/sec
5 minute output rate 0 pkts/sec, 0 bytes/sec
5 minute drop rate, 0 pkts/sec

------------------ show perfmon ------------------

PERFMON STATS: Current Average
Xlates 0/s 0/s
Connections 1/s 1/s
TCP Conns 0/s 0/s
UDP Conns 0/s 0/s
URL Access 0/s 0/s
URL Server Req 0/s 0/s
TCP Fixup 0/s 0/s
TCP Intercept Established Conns 0/s 0/s
TCP Intercept Attempts 0/s 0/s
TCP Embryonic Conns Timeout 0/s 0/s
HTTP Fixup 0/s 0/s
FTP Fixup 0/s 0/s
AAA Authen 0/s 0/s
AAA Author 0/s 0/s
AAA Account 0/s 0/s

VALID CONNS RATE in TCP INTERCEPT: Current Average
N/A 87.68%

------------------ show counters ------------------

Protocol Counter Value Context
IP IN_PKTS 103230 Summary
IP OUT_PKTS 86895 Summary
IP IN_DROP_NFU 513 Summary
IP TO_ARP 62292 Summary
IP TO_UDP 13918 Summary
IP TO_ICMP 26507 Summary
TCP OUT_PKTS 68276 Summary
TCP SESS_CTOD 34138 Summary
TCP OUT_CLSD 34138 Summary
TCP HASH_ADD 34138 Summary
TCP SND_SYN 34138 Summary
UDP IN_PKTS 13918 Summary
UDP OUT_PKTS 26082 Summary
ICMP IN_PKTS 26507 Summary
ICMP OUT_PKTS 25730 Summary
ICMP PORT_UNREACH 20 Summary
SSLERR BAD_PROTOCOL_VERSION_NUMBER 1 Summary
SSLERR BAD_SIGNATURE 2 Summary
SSLALERT RX_CLOSE_NOTIFY 1 Summary
SSLALERT RX_WARNING_ALERT 1 Summary
SSLALERT TX_CLOSE_NOTIFY 71 Summary
SSLALERT TX_WARNING_ALERT 71 Summary
SSLDEV NEW_CTX 1 Summary
SSL_NP OPEN_CONN 2 Summary
SSL_NP HANDSHAKE_START 76 Summary
SSL_NP HANDSHAKE_DONE 76 Summary
SSL_NP DOWNSTREAM_CLOSE 308 Summary
SSL_NP DOWNSTREAM_CLOSE_NEXT 74 Summary
SSL_NP UPSTREAM_CLOSE 75 Summary
SSL_NP UPSTREAM_CLOSE_NEXT 74 Summary
SSL_NP FREE_CONN 74 Summary
SSL_NP NEW_CONN_SERVER 76 Summary
SSL_NP IN_PKTS_RX 381 Summary
SSL_NP IN_PKTS_TX 76 Summary
SSL_NP OUT_PKTS_RX 5103749 Summary
SSL_NP OUT_PKTS_TX 5103972 Summary
SSL_NP SESSIONS_CLEARED 76 Summary
IKE INV_SPI_SENT 18 Summary
NPSHIM CTX_ALLOC 202 Summary
NPSHIM CTX_FREE 194 Summary
NPSHIM WRITE_UNBLOCKED 8951 Summary
NPSHIM READ_RECV 23247 Summary
VPIF BAD_VALUE 4772 Summary
VPIF NOT_FOUND 31826958 Summary
IPSEC IN_SA_CREATED 1024 Summary
IPSEC OUT_SA_CREATED 1024 Summary
IPSEC IN_SA_ACTIVATED 61 Summary
IPSEC SA_DELETION_RETRY 1 Summary
SSLENC CONTEXT_CREATED 76 Summary
SSLENC CONTEXT_UPDATED 76 Summary
SSLENC CONTEXT_DESTROYED 74 Summary
I2C BUS_COLLISION 6 Summary

------------------ show service-policy ------------------

Global policy:
Service-policy: global_policy
Class-map: inspection_default
Inspect: dns preset_dns_map, packet 760141, lock fail 0, drop 87, reset-drop 0, v6-fail-close 0
message-length maximum client auto, drop 0
message-length maximum 512, drop 0
dns-guard, count 362682
protocol-enforcement, drop 51
nat-rewrite, count 8188
Inspect: ftp, packet 3852, lock fail 0, drop 0, reset-drop 0, v6-fail-close 0
Inspect: h323 h225 _default_h323_map, packet 0, lock fail 0, drop 0, reset-drop 0, v6-fail-close 0
tcp-proxy: bytes in buffer 0, bytes dropped 0
h245-tunnel-block drops 0 connection
Inspect: h323 ras _default_h323_map, packet 0, lock fail 0, drop 0, reset-drop 0, v6-fail-close 0
h245-tunnel-block drops 0 connection
Inspect: rsh, packet 0, lock fail 0, drop 0, reset-drop 0, v6-fail-close 0
Inspect: rtsp, packet 0, lock fail 0, drop 0, reset-drop 0, v6-fail-close 0
tcp-proxy: bytes in buffer 0, bytes dropped 0
Inspect: esmtp _default_esmtp_map, packet 0, lock fail 0, drop 0, reset-drop 0, v6-fail-close 0
mask-banner, count 0
match cmd line length gt 512
drop-connection log, packet 0
match cmd RCPT count gt 100
drop-connection log, packet 0
match body line length gt 998
log, packet 0
match header line length gt 998
drop-connection log, packet 0
match sender-address length gt 320
drop-connection log, packet 0
match MIME filename length gt 255
drop-connection log, packet 0
match ehlo-reply-parameter others
mask, packet 0
Inspect: sqlnet, packet 0, lock fail 0, drop 0, reset-drop 0, v6-fail-close 0
Inspect: skinny , packet 0, lock fail 0, drop 0, reset-drop 0, v6-fail-close 0
tcp-proxy: bytes in buffer 0, bytes dropped 0
Inspect: sunrpc, packet 0, lock fail 0, drop 0, reset-drop 0, v6-fail-close 0
tcp-proxy: bytes in buffer 0, bytes dropped 0
Inspect: xdmcp, packet 0, lock fail 0, drop 0, reset-drop 0, v6-fail-close 0
Inspect: sip , packet 0, lock fail 0, drop 0, reset-drop 0, v6-fail-close 0
tcp-proxy: bytes in buffer 0, bytes dropped 0
Inspect: netbios, packet 76281, lock fail 0, drop 0, reset-drop 0, v6-fail-close 0
Inspect: tftp, packet 0, lock fail 0, drop 0, reset-drop 0, v6-fail-close 0
Inspect: ip-options _default_ip_options_map, packet 0, lock fail 0, drop 0, reset-drop 0, v6-fail-close 0
Router Alert: allow 0, clear 0

------------------ show mode ------------------

Security context mode: single

------------------ show history ------------------

en

------------------ show firewall ------------------

Firewall mode: Router

------------------ show startup-config errors ------------------

Reading from flash...
!!!
------------------ console logs ------------------

Message #1 : Message #2 :
Total NICs found: 13
Message #3 : i82574L rev00 Gigabit Ethernet @ irq10 dev 0 index 08Message #4 : MAC: a89d.2192.b46b
Message #5 : i82574L rev00 Gigabit Ethernet @ irq10 dev 0 index 07Message #6 : MAC: a89d.2192.b46f
Message #7 : i82574L rev00 Gigabit Ethernet @ irq05 dev 0 index 06Message #8 : MAC: a89d.2192.b46a
Message #9 : i82574L rev00 Gigabit Ethernet @ irq05 dev 0 index 05Message #10 : MAC: a89d.2192.b46e
Message #11 : i82574L rev00 Gigabit Ethernet @ irq10 dev 0 index 04Message #12 : MAC: a89d.2192.b469
Message #13 : i82574L rev00 Gigabit Ethernet @ irq10 dev 0 index 03Message #14 : MAC: a89d.2192.b46d
Message #15 : i82574L rev00 Gigabit Ethernet @ irq05 dev 0 index 02Message #16 : MAC: a89d.2192.b468
Message #17 : i82574L rev00 Gigabit Ethernet @ irq05 dev 0 index 01Message #18 : MAC: a89d.2192.b46c
Message #19 : i82574L rev00 Gigabit Ethernet @ irq11 dev 0 index 00Message #20 : MAC: a89d.2192.b467
Message #21 : ivshmem rev03 Backplane Data Interface @ index 09 MAC: 0000.0001.0002
Message #22 : en_vtun rev00 Backplane Control Interface @ index 10 MAC: 0000.0001.0001
Message #23 : en_vtun rev00 Backplane Int-Mgmt Interface @ index 11 MAC: 0000.0001.0003
Message #24 : en_vtun rev00 Backplane Ext-Mgmt Interface @ index 12 MAC: 0000.0000.0000
Message #25 : Verify the activation-key, it might take a while...
Message #26 : Running Permanent Message #27 : Activation Key: Message #28 : 0x8f1aea42 Message #29 : 0xb45dba37 Message #30 : 0xf162d528 Message #31 : 0xd6143cb0 Message #32 : 0x8816d3a0 Message #33 :
Message #34 :
Licensed Message #35 : features for this platform:
Message #36 : Maximum Physical Interfaces : Unlimited perpetual
Message #37 : Maximum VLANs : 200 perpetual
Message #38 : Inside Hosts : Unlimited perpetual
Message #39 : Failover : Active/Active perpetual
Message #40 : Encryption-DES : Enabled perpetual
Message #41 : Encryption-3DES-AES : Enabled perpetual
Message #42 : Security Contexts : 2 perpetual
Message #43 : GTP/GPRS : Disabled perpetual
Message #44 : AnyConnect Premium Peers : 2 perpetual
Message #45 : AnyConnect Essentials : Disabled perpetual
Message #46 : Other VPN Peers : 750 perpetual
Message #47 : Total VPN Peers : 750 perpetual
Message #48 : Shared License : Disabled perpetual
Message #49 : AnyConnect for Mobile : Disabled perpetual
Message #50 : AnyConnect for Cisco VPN Phone : Disabled perpetual
Message #51 : Advanced Endpoint Assessment : Disabled perpetual
Message #52 : UC Phone Proxy Sessions : 2 perpetual
Message #53 : Total UC Proxy Sessions : 2 perpetual
Message #54 : Botnet Traffic Filter : Disabled perpetual
Message #55 : Intercompany Media Engine : Disabled perpetual
Message #56 : IPS Module : Disabled perpetual
Message #57 : Cluster : Disabled perpetual
Message #58 :
This platform has an ASA5525 VPN Premium license.
Message #59 :
Message #60 : Encryption hardware device : Cisco ASA-55xx on-board accelerator (revision 0x1)
Message #61 : Boot microcode : CNPx-MC-BOOT-2.00
Message #62 : SSL/IKE microcode : CNPx-MC-SSL-PLUS-T020
Message #63 : IPSec microcode : CNPx-MC-IPSEC-MAIN-0022
Message #64 :
Cisco Adaptive Security Appliance Software Version 9.0(1)
Message #65 :
Message #66 : ****************************** Warning *******************************
Message #67 : This product contains cryptographic features and is
Message #68 : subject to United States and local country laws
Message #69 : governing, import, export, transfer, and use.
Message #70 : Delivery of Cisco cryptographic products does not
Message #71 : imply third-party authority to import, export,
Message #72 : distribute, or use encryption. Importers, exporters,
Message #73 : distributors and users are responsible for compliance
Message #74 : with U.S. and local country laws. By using this
Message #75 : product you agree to comply with applicable laws and
Message #76 : regulations. If you are unable to comply with U.S.
Message #77 : and local laws, return the enclosed items immediately.
Message #78 :
Message #79 : A summary of U.S. laws governing Cisco cryptographic
Message #80 : products may be found at:
Message #81 : http://www.cisco.com/wwl/export/crypto/tool/stqrg.html
Message #82 :
Message #83 : If you require further assistance please contact us by
Message #84 : sending email to export@cisco.com.
Message #85 : ******************************* Warning *******************************
Message #86 :
Message #87 : This product includes software developed by the OpenSSL Project
Message #88 : for use in the OpenSSL Toolkit (http://www.openssl.org/)
Message #89 : Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
Message #90 : All rights reserved.
Message #91 : Copyright (c) 1998-2011 The OpenSSL Project.
Message #92 : All rights reserved.

Message #93 : This product includes software developed at the University of
Message #94 : California, Irvine for use in the DAV Explorer project
Message #95 : (http://www.ics.uci.edu/~webdav/)
Message #96 : Copyright (c) 1999-2005 Regents of the University of California.
Message #97 : All rights reserved.

Message #98 : Busybox, version 1.16.1, Copyright (C) 1989, 1991 Free Software Foundation, Inc.
Message #99 : 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA
Message #100 : Busybox comes with ABSOLUTELY NO WARRANTY.
Message #101 : This is free software, and you are welcome to redistribute it under the General
Message #102 : Public License v.2 (http://www.gnu.org/licenses/gpl-2.0.html)
Message #103 : See User Manual (''Licensing'') for details.

Message #104 : DOSFSTOOLS, version 2.11, Copyright (C) 1989, 1991 Free Software Foundation, Inc.
Message #105 : 59 Temple Place, Suite 330, Boston, MA 02111-1307
Message #106 : 675 Mass Ave, Cambridge, MA 02139
Message #107 : DOSFSTOOLS comes with ABSOLUTELY NO WARRANTY.
Message #108 : This is free software, and you are welcome to redistribute it under the General
Message #109 : Public License v.2 (http://www.gnu.org/licenses/gpl-2.0.html)
Message #110 : See User Manual (''Licensing'') for details.

Message #111 : grub, version 0.94, Copyright (C) 1989, 1991 Free Software Foundation, Inc.
Message #112 : 59 Temple Place, Suite 330, Boston, MA 02111-1307
Message #113 : grub comes with ABSOLUTELY NO WARRANTY.
Message #114 : This is free software, and you are welcome to redistribute it under the General
Message #115 : Public License v.2 (http://www.gnu.org/licenses/gpl-2.0.html)
Message #116 : See User Manual (''Licensing'') for details.

Message #117 : libgcc, version 4.3, Copyright (C) 2007 Free Software Foundation, Inc.
Message #118 : libgcc comes with ABSOLUTELY NO WARRANTY.
Message #119 : This is free software, and you are welcome to redistribute it under the General
Message #120 : Public License v.2 (http://www.gnu.org/licenses/gpl-2.0.html)
Message #121 : See User Manual (''Licensing'') for details.

Message #122 : libstdc++, version 4.3, Copyright (C) 2007 Free Software Foundation, Inc.
Message #123 : libstdc++ comes with ABSOLUTELY NO WARRANTY.
Message #124 : This is free software, and you are welcome to redistribute it under the General
Message #125 : Public License v.2 (http://www.gnu.org/licenses/gpl-2.0.html)
Message #126 : See User Manual (''Licensing'') for details.

Message #127 : Linux kernel, version 2.6.29.6, Copyright (C) 1989, 1991 Free Software
Message #128 : Foundation, Inc.
Message #129 : 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA
Message #130 : Linux kernel comes with ABSOLUTELY NO WARRANTY.
Message #131 : This is free software, and you are welcome to redistribute it under the General
Message #132 : Public License v.2 (http://www.gnu.org/licenses/gpl-2.0.html)
Message #133 : See User Manual (''Licensing'') for details.

Message #134 : module-init-tools, version 3.10, Copyright (C) 1989, 1991 Free Software
Message #135 : Foundation, Inc.
Message #136 : 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
Message #137 : module-init-tools comes with ABSOLUTELY NO WARRANTY.
Message #138 : This is free software, and you are welcome to redistribute it under the General
Message #139 : Public License v.2 (http://www.gnu.org/licenses/gpl-2.0.html)
Message #140 : See User Manual (''Licensing'') for details.

Message #141 : numactl, version 2.0.3, Copyright (C) 2008 SGI.
Message #142 : Author: Andi Kleen, SUSE Labs
Message #143 : Version 2.0.0 by Cliff Wickman, Chritopher Lameter and Lee Schermerhorn
Message #144 : numactl comes with ABSOLUTELY NO WARRANTY.
Message #145 : This is free software, and you are welcome to redistribute it under the General
Message #146 : Public License v.2 (http://www.gnu.org/licenses/gpl-2.0.html)
Message #147 : See User Manual (''Licensing'') for details.

Message #148 : pciutils, version 3.1.4, Copyright (C) 1989, 1991 Free Software Foundation, Inc.
Message #149 : 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA
Message #150 : pciutils comes with ABSOLUTELY NO WARRANTY.
Message #151 : This is free software, and you are welcome to redistribute it under the General
Message #152 : Public License v.2 (http://www.gnu.org/licenses/gpl-2.0.html)
Message #153 : See User Manual (''Licensing'') for details.

Message #154 : qemu, version 0.12.5, Copyright (C) 1989, 1991 Free Software Foundation, Inc.
Message #155 : 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA
Message #156 : qemu comes with ABSOLUTELY NO WARRANTY.
Message #157 : This is free software, and you are welcome to redistribute it under the General
Message #158 : Public License v.2 (http://www.gnu.org/licenses/gpl-2.0.html)
Message #159 : See User Manual (''Licensing'') for details.

Message #160 : qemu-KVM Inter-VM Shared Memory Patch, version 1.0,
Message #161 : Copyright (C) 2009 Cam Macdonell
Message #162 : qemu-KVM Inter-VM Shared Memory Patch comes with ABSOLUTELY NO WARRANTY.
Message #163 : This is free software, and you are welcome to redistribute it under the General
Message #164 : Public License v.2 (http://www.gnu.org/licenses/gpl-2.0.html)
Message #165 : See User Manual (''Licensing'') for details.

Message #166 : readline, version 5.2, Copyright (C) 1989, 1991 Free Software Foundation, Inc.
Message #167 : 59 Temple Place, Suite 330, Boston, MA 02111 USA
Message #168 : readline comes with ABSOLUTELY NO WARRANTY.
Message #169 : This is free software, and you are welcome to redistribute it under the General
Message #170 : Public License v.2 (http://www.gnu.org/licenses/gpl-2.0.html)
Message #171 : See User Manual (''Licensing'') for details.

Message #172 : udev, version 146, Copyright (C) 1989, 1991 Free Software Foundation, Inc.
Message #173 : 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA
Message #174 : udev comes with ABSOLUTELY NO WARRANTY.
Message #175 : This is free software, and you are welcome to redistribute it under the General
Message #176 : Public License v.2 (http://www.gnu.org/licenses/gpl-2.0.html)
Message #177 : See User Manual (''Licensing'') for details.

Message #178 : Cisco Adapative Security Appliance Software, version 9.0,
Message #179 : Copyright (c) 1996-2012 by Cisco Systems, Inc.
Message #180 : Certain components of Cisco ASA Software, Version 9.0 are licensed under the GNU
Message #181 : Lesser Public License (LGPL) Version 2.1. The software code licensed under LGPL
Message #182 : Version 2.1 is free software that comes with ABSOLUTELY NO WARRANTY. You can
Message #183 : redistribute and/or modify such LGPL code under the terms of LGPL Version 2.1
Message #184 : (http://www.gnu.org/licenses/lgpl-2.1.html). See User Manual for licensing
Message #185 : details.

Message #186 : Restricted Rights Legend

Message #187 : Use, duplication, or disclosure by the Government is
Message #188 : subject to restrictions as set forth in subparagraph
Message #189 : (c) of the Commercial Computer Software - Restricted
Message #190 : Rights clause at FAR sec. 52.227-19 and subparagraph
Message #191 : (c) (1) (ii) of the Rights in Technical Data and Computer
Message #192 : Software clause at DFARS sec. 252.227-7013.

Message #193 : Cisco Systems, Inc.
Message #194 : 170 West Tasman Drive
Message #195 : San Jose, California 95134-1706

sh crypto isakmp sa

IKEv1 SAs:

Active SA: 2
Rekey SA: 0 (A tunnel will report 1 Active and 1 Rekey SA during rekey)
Total IKE SA: 2

1 IKE Peer: 116.246.25.164
Type : L2L Role : initiator
Rekey : no State : MM_ACTIVE
2 IKE Peer: 101.89.221.113
Type : user Role : responder
Rekey : no State : AM_ACTIVE

sh crypto ipsec sa peer 101.89.221.113
peer address: 101.89.221.113
Crypto map tag: dyn1, seq num: 65534, local addr: 173.11.91.117

local ident (addr/mask/prot/port): (0.0.0.0/0.0.0.0/0/0)
remote ident (addr/mask/prot/port): (10.1.84.101/255.255.255.255/0/0)
current_peer: 101.89.221.113, username: test
dynamic allocated peer ip: 10.1.84.101

#pkts encaps: 0, #pkts encrypt: 0, #pkts digest: 0
#pkts decaps: 4, #pkts decrypt: 4, #pkts verify: 4
#pkts compressed: 0, #pkts decompressed: 0
#pkts not compressed: 0, #pkts comp failed: 0, #pkts decomp failed: 0
#pre-frag successes: 0, #pre-frag failures: 0, #fragments created: 0
#PMTUs sent: 0, #PMTUs rcvd: 0, #decapsulated frgs needing reassembly: 0
#TFC rcvd: 0, #TFC sent: 0
#Valid ICMP Errors rcvd: 0, #Invalid ICMP Errors rcvd: 0
#send errors: 0, #recv errors: 0

local crypto endpt.: 173.11.91.117/0, remote crypto endpt.: 101.89.221.113/0
path mtu 1500, ipsec overhead 74(44), media mtu 1500
PMTU time remaining (sec): 0, DF policy: copy-df
ICMP error validation: disabled, TFC packets: disabled
current outbound spi: 2A52929F
current inbound spi : 66DAEAF1

inbound esp sas:
spi: 0x66DAEAF1 (1725623025)
transform: esp-aes esp-sha-hmac no compression
in use settings ={RA, Tunnel, IKEv1, }
slot: 0, conn_id: 3780608, crypto-map: dyn1
sa timing: remaining key lifetime (sec): 28662
IV size: 16 bytes
replay detection support: Y
Anti replay bitmap:
0x00000000 0x0000001F
outbound esp sas:
spi: 0x2A52929F (710054559)
transform: esp-aes esp-sha-hmac no compression
in use settings ={RA, Tunnel, IKEv1, }
slot: 0, conn_id: 3780608, crypto-map: dyn1
sa timing: remaining key lifetime (sec): 28662
IV size: 16 bytes
replay detection support: Y
Anti replay bitmap:
0x00000000 0x00000001

SiteB:

sh tech-support

Cisco Adaptive Security Appliance Software Version 8.0(5)
Detected an old ASDM version.
You will need to upgrade it before using ASDM.

Compiled on Mon 02-Nov-09 21:22 by builders
System image file is "disk0:/asa805-k8.bin"
Config file at boot was "startup-config"

CiscoASA5520 up 2 years 16 days

Hardware: ASA5520, 512 MB RAM, CPU Pentium 4 Celeron 2000 MHz
Internal ATA Compact Flash, 64MB
BIOS Flash LHF00L47 @ 0xffe00000, 1024KB

Encryption hardware device : Cisco ASA-55x0 on-board accelerator (revision 0x0)
Boot microcode : CN1000-MC-BOOT-2.00
SSL/IKE microcode: CNLite-MC-SSLm-PLUS-2.03
IPSec microcode : CNlite-MC-IPSECm-MAIN-2.05
0: Ext: GigabitEthernet0/0 : address is 0017.9526.f1f6, irq 9
1: Ext: GigabitEthernet0/1 : address is 0017.9526.f1f7, irq 9
2: Ext: GigabitEthernet0/2 : address is 0017.9526.f1f8, irq 9
3: Ext: GigabitEthernet0/3 : address is 0017.9526.f1f9, irq 9
4: Ext: Management0/0 : address is 0017.9526.f1f5, irq 11
5: Int: Not used : irq 11
6: Int: Not used : irq 5

Licensed features for this platform:
Maximum Physical Interfaces : Unlimited
Maximum VLANs : 150
Inside Hosts : Unlimited
Failover : Active/Active
VPN-DES : Enabled
VPN-3DES-AES : Enabled
Security Contexts : 2
GTP/GPRS : Disabled
VPN Peers : 750
WebVPN Peers : 2
AnyConnect for Mobile : Disabled
AnyConnect for Linksys phone : Disabled
Advanced Endpoint Assessment : Disabled
UC Proxy Sessions : 2

This platform has an ASA 5520 VPN Plus license.

Serial Number: JMX1018K0FA
Running Activation Key: 0x45291f65 0x3028cfe2 0x8841b1b8 0x9b288870 0x010cccaa
Configuration register is 0x1
Configuration last modified by enable_15 at 14:42:16.039 gmt Wed Jan 13 2016

------------------ show disk0: controller ------------------

Flash Model: TOSHIBA THNCF064MBA

------------------ show clock ------------------

08:43:27.124 gmt Thu Jan 14 2016

------------------ show crashinfo ------------------

Saved crash: 15:01:21.994 gmt Fri Mar 25 2011

------------------ show module ------------------

Mod Card Type Model Serial No.
--- -------------------------------------------- ------------------ -----------
0 ASA 5520 Adaptive Security Appliance ASA5520 JMX1018K0FA

Mod MAC Address Range Hw Version Fw Version Sw Version
--- --------------------------------- ------------ ------------ ---------------
0 0017.9526.f1f5 to 0017.9526.f1f9 1.1 1.0(10)0 8.0(5)

Mod SSM Application Name Status SSM Application Version
--- ------------------------------ ---------------- --------------------------

Mod Status Data Plane Status Compatibility
--- ------------------ --------------------- -------------
0 Up Sys Not Applicable

------------------ show memory ------------------

Free memory: 283203048 bytes (53%)
Used memory: 253667864 bytes (47%)
------------- ----------------
Total memory: 536870912 bytes (100%)

------------------ show memory dma ------------------

DMA memory:
Unused memory: 29446464 bytes (37%)
Crypto reserved memory: 20471932 bytes (26%)
Crypto free: 19222532 bytes (24%)
Crypto used: 1249400 bytes ( 2%)
Block reserved memory: 29071456 bytes (37%)
Block free: 25379008 bytes (32%)
Block used: 3692448 bytes ( 5%)
Used memory: 251364 bytes ( 0%)
----------------------------- ----------------
Total memory: 79241216 bytes (100%)

------------------ show conn count ------------------

17433 in use, 150202 most used

------------------ show xlate count ------------------

20817 in use, 57624 most used

------------------ show blocks ------------------

SIZE MAX LOW CNT
0 700 565 699
4 100 99 99
80 952 875 952
256 612 581 612
1550 9261 1845 7721
2048 100 94 100
2560 164 162 164
4096 100 96 100
8192 100 98 100
16384 102 97 102
65536 16 11 16

------------------ show blocks queue history detail ------------------

History buffer memory usage: 2136 bytes (default)

------------------ show interface ------------------

Interface GigabitEthernet0/0 "Outside", is up, line protocol is up
Hardware is i82546GB rev03, BW 1000 Mbps, DLY 10 usec
Auto-Duplex(Full-duplex), Auto-Speed(100 Mbps)
MAC address 0017.9526.f1f6, MTU 1500
IP address 116.246.25.164, subnet mask 255.255.255.240
84985909494 packets input, 74399643399610 bytes, 0 no buffer
Received 4479583 broadcasts, 0 runts, 0 giants
5685 input errors, 2 CRC, 0 frame, 5683 overrun, 0 ignored, 0 abort
0 L2 decode drops
85350422996 packets output, 35855768436791 bytes, 4894585 underruns
0 output errors, 0 collisions, 63 interface resets
0 late collisions, 0 deferred
0 input reset drops, 590 output reset drops, 53 tx hangs
input queue (curr/max packets): hardware (0/33) software (0/0)
output queue (curr/max packets): hardware (0/255) software (0/0)
Traffic Statistics for "Outside":
84944202295 packets input, 72787400544795 bytes
85355321810 packets output, 34176788202935 bytes
3340824174 packets dropped
1 minute input rate 3485 pkts/sec, 3160872 bytes/sec
1 minute output rate 2902 pkts/sec, 372836 bytes/sec
1 minute drop rate, 168 pkts/sec
5 minute input rate 2884 pkts/sec, 2820432 bytes/sec
5 minute output rate 2440 pkts/sec, 332630 bytes/sec
5 minute drop rate, 112 pkts/sec
Control Point Interface States:
Interface number is 2
Interface config status is active
Interface state is active
Interface GigabitEthernet0/1 "", is up, line protocol is up
Hardware is i82546GB rev03, BW 1000 Mbps, DLY 10 usec
Auto-Duplex(Full-duplex), Auto-Speed(1000 Mbps)
Active member of Redundant1
MAC address 0017.9526.f1f7, MTU not set
IP address unassigned
91940093520 packets input, 36291812922130 bytes, 0 no buffer
Received 19417 broadcasts, 0 runts, 0 giants
15731 input errors, 0 CRC, 0 frame, 15731 overrun, 0 ignored, 0 abort
0 L2 decode drops
87406971419 packets output, 74506258217996 bytes, 16 underruns
0 output errors, 0 collisions, 0 interface resets
0 late collisions, 0 deferred
0 input reset drops, 0 output reset drops, 0 tx hangs
input queue (curr/max packets): hardware (0/33) software (0/0)
output queue (curr/max packets): hardware (0/255) software (0/0)
Control Point Interface States:
Interface number is 3
Interface config status is active
Interface state is active
Interface GigabitEthernet0/2 "DMZ", is up, line protocol is up
Hardware is i82546GB rev03, BW 1000 Mbps, DLY 10 usec
Auto-Duplex(Full-duplex), Auto-Speed(1000 Mbps)
MAC address 0017.9526.f1f8, MTU 1500
IP address 192.168.210.1, subnet mask 255.255.255.0
634045733 packets input, 368124393511 bytes, 0 no buffer
Received 528724 broadcasts, 0 runts, 0 giants
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort
62684 L2 decode drops
570524219 packets output, 287142388661 bytes, 0 underruns
0 output errors, 0 collisions, 1 interface resets
0 late collisions, 0 deferred
0 input reset drops, 0 output reset drops, 0 tx hangs
input queue (curr/max packets): hardware (1/33) software (0/0)
output queue (curr/max packets): hardware (0/52) software (0/0)
Traffic Statistics for "DMZ":
633983041 packets input, 355878213420 bytes
570524219 packets output, 276081610918 bytes
5513432 packets dropped
1 minute input rate 128 pkts/sec, 24222 bytes/sec
1 minute output rate 97 pkts/sec, 19089 bytes/sec
1 minute drop rate, 0 pkts/sec
5 minute input rate 113 pkts/sec, 55002 bytes/sec
5 minute output rate 106 pkts/sec, 51352 bytes/sec
5 minute drop rate, 0 pkts/sec
Control Point Interface States:
Interface number is 4
Interface config status is active
Interface state is active
Interface GigabitEthernet0/3 "hongkong", is up, line protocol is up
Hardware is i82546GB rev03, BW 1000 Mbps, DLY 10 usec
Auto-Duplex(Full-duplex), Auto-Speed(1000 Mbps)
MAC address 0017.9526.f1f9, MTU 1500
IP address 218.213.225.148, subnet mask 255.255.255.248
1465003329 packets input, 1387755518960 bytes, 0 no buffer
Received 1219252 broadcasts, 0 runts, 0 giants
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort
0 L2 decode drops
1116253138 packets output, 159116267373 bytes, 0 underruns
0 output errors, 0 collisions, 1 interface resets
0 late collisions, 0 deferred
0 input reset drops, 0 output reset drops, 0 tx hangs
input queue (curr/max packets): hardware (0/33) software (0/0)
output queue (curr/max packets): hardware (0/66) software (0/0)
Traffic Statistics for "hongkong":
1464993604 packets input, 1360713739098 bytes
1116253138 packets output, 136240993761 bytes
37752737 packets dropped
1 minute input rate 258 pkts/sec, 240504 bytes/sec
1 minute output rate 197 pkts/sec, 17909 bytes/sec
1 minute drop rate, 1 pkts/sec
5 minute input rate 120 pkts/sec, 88603 bytes/sec
5 minute output rate 108 pkts/sec, 23488 bytes/sec
5 minute drop rate, 1 pkts/sec
Control Point Interface States:
Interface number is 5
Interface config status is active
Interface state is active
Interface Management0/0 "management", is down, line protocol is down
Hardware is i82557, BW 100 Mbps, DLY 100 usec
Auto-Duplex, Auto-Speed
MAC address 0017.9526.f1f5, MTU 1500
IP address 192.168.1.1, subnet mask 255.255.255.0
0 packets input, 0 bytes, 0 no buffer
Received 0 broadcasts, 0 runts, 0 giants
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort
0 L2 decode drops
0 packets output, 0 bytes, 0 underruns
0 output errors, 0 collisions, 0 interface resets
0 babbles, 0 late collisions, 0 deferred
0 lost carrier, 0 no carrier
0 input reset drops, 0 output reset drops
input queue (curr/max packets): hardware (0/0) software (0/0)
output queue (curr/max packets): hardware (0/0) software (0/0)
Traffic Statistics for "management":
0 packets input, 0 bytes
0 packets output, 0 bytes
0 packets dropped
1 minute input rate 0 pkts/sec, 0 bytes/sec
1 minute output rate 0 pkts/sec, 0 bytes/sec
1 minute drop rate, 0 pkts/sec
5 minute input rate 0 pkts/sec, 0 bytes/sec
5 minute output rate 0 pkts/sec, 0 bytes/sec
5 minute drop rate, 0 pkts/sec
Management-only interface. Blocked 0 through-the-device packets
0 IPv4 packets originated from management network
0 IPv4 packets destined to management network
0 IPv6 packets originated from management network
0 IPv6 packets destined to management network
Control Point Interface States:
Interface number is 6
Interface config status is active
Interface state is not active
Interface Redundant1 "Inside", is up, line protocol is up
Hardware is i82546GB rev03, BW 1000 Mbps, DLY 10 usec
Auto-Duplex(Full-duplex), Auto-Speed(1000 Mbps)
MAC address 0017.9526.f1f7, MTU 1500
IP address 10.1.60.1, subnet mask 255.255.255.0
91940096443 packets input, 36291813487608 bytes, 0 no buffer
Received 19417 broadcasts, 0 runts, 0 giants
15731 input errors, 0 CRC, 0 frame, 15731 overrun, 0 ignored, 0 abort
0 L2 decode drops
87406974277 packets output, 74506260430449 bytes, 16 underruns
0 output errors, 0 collisions, 0 interface resets
0 late collisions, 0 deferred
0 input reset drops, 0 output reset drops, 0 tx hangs
input queue (curr/max packets): hardware (1/33) software (0/0)
output queue (curr/max packets): hardware (0/255) software (0/0)
Traffic Statistics for "Inside":
91936689968 packets input, 34471210776900 bytes
87406974293 packets output, 72835979323258 bytes
5577707175 packets dropped
1 minute input rate 3444 pkts/sec, 419788 bytes/sec
1 minute output rate 3850 pkts/sec, 3317401 bytes/sec
1 minute drop rate, 273 pkts/sec
5 minute input rate 2853 pkts/sec, 416826 bytes/sec
5 minute output rate 3112 pkts/sec, 2886522 bytes/sec
5 minute drop rate, 224 pkts/sec
Control Point Interface States:
Interface number is 8
Interface config status is active
Interface state is active
Redundancy Information:
Member GigabitEthernet0/1(Active)
Last switchover at 12:47:34 gmt Dec 28 2013

------------------ show cpu usage ------------------

CPU utilization for 5 seconds = 28%; 1 minute: 16%; 5 minutes: 13%

------------------ show cpu hogging process ------------------

Process: Dispatch Unit, PROC_PC_TOTAL: 14, MAXHOG: 12, LASTHOG: 12
LASTHOG At: 01:28:53 gmt Nov 9 2014
PC: 817fc04 (suspend)

Process: Dispatch Unit, NUMHOG: 14, MAXHOG: 12, LASTHOG: 12
LASTHOG At: 01:28:53 gmt Nov 9 2014
PC: 817fc04 (suspend)
Call stack: 817fc04 805eb43

Process: telnet/ci, PROC_PC_TOTAL: 2, MAXHOG: 8, LASTHOG: 8
LASTHOG At: 09:00:10 gmt May 6 2015
PC: 8b47c2b (suspend)

Process: telnet/ci, NUMHOG: 2, MAXHOG: 8, LASTHOG: 8
LASTHOG At: 09:00:10 gmt May 6 2015
PC: 8b47c2b (suspend)
Call stack: 8b4845e 8b52e01 87d8455 91bc9dd 80c0465 80b401b 80b4b00
805eb43

Process: telnet/ci, NUMHOG: 1, MAXHOG: 2, LASTHOG: 2
LASTHOG At: 09:00:25 gmt May 6 2015
PC: 805fc65 (suspend)
Call stack: 805fc65 90a27fa 909b89d 909b9de 891ecb7 892c7e5 8b095af
8b097a9 8b06c9a 8409557 87e1f36 87e3069 80b2ec0 80b417e

Process: dbgtrace, NUMHOG: 8, MAXHOG: 4, LASTHOG: 3
LASTHOG At: 15:50:47 gmt Jul 20 2015
PC: 8af3f7c (suspend)
Call stack: 8af3f7c 8af7e8d 8af80df 8af81b3 817e9e2 817eca9 805eb43

Process: telnet/ci, NUMHOG: 3, MAXHOG: 6, LASTHOG: 4
LASTHOG At: 17:03:51 gmt Aug 17 2015
PC: 805fc65 (suspend)
Call stack: 805fc65 8865f9a 88d004b 840874d 84094b7 87e1f36 87e3069
80b2ec0 80b417e 80b4b00 805eb43

Process: telnet/ci, PROC_PC_TOTAL: 7, MAXHOG: 26, LASTHOG: 25
LASTHOG At: 17:03:52 gmt Aug 17 2015
PC: 805fc65 (suspend)

Process: telnet/ci, NUMHOG: 3, MAXHOG: 26, LASTHOG: 25
LASTHOG At: 17:03:52 gmt Aug 17 2015
PC: 805fc65 (suspend)
Call stack: 805fc65 90a284c 90a2a92 90a2168 893317e 89338b0 891edfd
892c7e5 8b095af 8b097a9 8b06c9a 8409557 87e1f36 87e3069

Process: NIC status poll, PROC_PC_TOTAL: 10, MAXHOG: 12, LASTHOG: 12
LASTHOG At: 14:54:25 gmt Aug 18 2015
PC: 8849c07 (suspend)

Process: NIC status poll, NUMHOG: 10, MAXHOG: 12, LASTHOG: 12
LASTHOG At: 14:54:25 gmt Aug 18 2015
PC: 8849c07 (suspend)
Call stack: 8849c07 805eb43

Process: telnet/ci, PROC_PC_TOTAL: 1, MAXHOG: 5, LASTHOG: 5
LASTHOG At: 10:45:13 gmt Aug 21 2015
PC: 87e1065 (suspend)

Process: telnet/ci, NUMHOG: 1, MAXHOG: 5, LASTHOG: 5
LASTHOG At: 10:45:13 gmt Aug 21 2015
PC: 87e1065 (suspend)
Call stack: 87e1065 87d9bf0 88b3144 88b3201 87d9a67 87d9ad1 87e1f36
87e3069 80b2ec0 80b417e 80b4b00 805eb43

Process: telnet/ci, PROC_PC_TOTAL: 52, MAXHOG: 3, LASTHOG: 3
LASTHOG At: 16:05:26 gmt Jan 13 2016
PC: 8431425 (suspend)

Process: telnet/ci, NUMHOG: 52, MAXHOG: 3, LASTHOG: 3
LASTHOG At: 16:05:26 gmt Jan 13 2016
PC: 8431425 (suspend)
Call stack: 8431425 843b80a 889397a 8893a5d 87e1f36 80be5ea 80bedcc
87e1f36 87e3069 80b2ec0 80b417e 80b4b00 805eb43

Process: ssh_init, PROC_PC_TOTAL: 30340, MAXHOG: 4, LASTHOG: 3
LASTHOG At: 03:22:19 gmt Jan 14 2016
PC: 8af3f7c (suspend)

Process: ssh_init, NUMHOG: 30332, MAXHOG: 3, LASTHOG: 3
LASTHOG At: 03:22:19 gmt Jan 14 2016
PC: 8af3f7c (suspend)
Call stack: 8af3f7c 8af55b7 8af8e73 805eb43

Process: ssh_init, PROC_PC_TOTAL: 151140, MAXHOG: 7, LASTHOG: 3
LASTHOG At: 03:22:24 gmt Jan 14 2016
PC: 8928611 (suspend)

Process: ssh_init, NUMHOG: 151138, MAXHOG: 7, LASTHOG: 3
LASTHOG At: 03:22:24 gmt Jan 14 2016
PC: 8928611 (suspend)
Call stack: 8928611 9165674 9162c80 9154f2f 9154d81 915ddbd 9179557
9166400 91540c6 9145ddc 914a77b 8af987e 8af5b0d 8af8e73

Process: telnet/ci, PROC_PC_TOTAL: 3, MAXHOG: 50, LASTHOG: 50
LASTHOG At: 08:43:27 gmt Jan 14 2016
PC: 836d048 (suspend)

Process: telnet/ci, NUMHOG: 3, MAXHOG: 50, LASTHOG: 50
LASTHOG At: 08:43:27 gmt Jan 14 2016
PC: 836d048 (suspend)
Call stack: 836d048 83684e6 83686e3 8054747 88e3915 8811332 87e1f36
87e3069 80b2ec0 80b417e 80b4b00 805eb43

Process: Dispatch Unit, PROC_PC_TOTAL: 28652, MAXHOG: 1006, LASTHOG: 26
LASTHOG At: 08:43:27 gmt Jan 14 2016
PC: 817fe47 (suspend)

Process: Dispatch Unit, NUMHOG: 28587, MAXHOG: 1006, LASTHOG: 26
LASTHOG At: 08:43:27 gmt Jan 14 2016
PC: 817fe47 (suspend)
Call stack: 817fe47 805eb43

Process: Dispatch Unit, PROC_PC_TOTAL: 176204, MAXHOG: 1010, LASTHOG: 66
LASTHOG At: 08:43:27 gmt Jan 14 2016
PC: 817fd89 (suspend)

Process: Dispatch Unit, NUMHOG: 143105, MAXHOG: 1010, LASTHOG: 66
LASTHOG At: 08:43:27 gmt Jan 14 2016
PC: 817fd89 (suspend)
Call stack: 817fd89 805eb43

CPU hog threshold (msec): 2.844
Last cleared: None

------------------ show process ------------------

PC SP STATE Runtime SBASE Stack Process
Lwe 08051abc c790ce4c 09b973b8 0 c790af38 7920/8192 block_diag
Mrd 0817fc04 c793d934 09b96cfc 2512839522 c791dac0 123588/131072 Dispatch Unit
Mwe 0836c705 c7942b2c 09b96aec 0 c7940d38 7528/8192 CF OIR
Mwe 0898c560 c7944d8c 09ac87d0 0 c7942ea8 7872/8192 lina_int
Mwe 08064da5 c79b4584 09b96aec 0 c79b26e0 7704/8192 Reload Control Thread
Mwe 08069906 c79bf4e4 09b98c18 12674 c79bb930 12480/16384 aaa
Mwe 08092986 c79c638c 09b98c74 0 c79c2498 15712/16384 CMGR Server Process
Mwe 08092e95 c79c849c 09b96aec 0 c79c6608 7760/8192 CMGR Timer Process
Lwe 0817ed21 c79d2c3c 09ba3ca4 4434 c79d0d38 3712/8192 dbgtrace
Msi 083f868c c79db34c 09b96aec 216741 c79d9438 7808/8192 557mcfix
Msi 083f84ae c79dd4bc 09b96aec 40 c79db5a8 7776/8192 557statspoll
Mwe 08b874cd c7c14b2c 09b96aec 1 c79fb0e8 7132/8192 netfs_thread_init
Mwe 09190715 c7a09694 09b96aec 0 c7a07810 7672/8192 Chunk Manager
Msi 0881b79e c7a14d8c 09b96aec 472225 c7a12e98 5936/8192 PIX Garbage Collector
Mwe 0880ee34 c7a22c34 09ab9a0c 1419 c7a20d30 7320/8192 IP Address Assign
Mwe 089d72e6 c7bb5b24 09afb118 0 c7bb3c20 7904/8192 QoS Support Module
Mwe 0888e6bf c7bb7ccc 09abaab0 0 c7bb5dc8 7904/8192 Client Update Task
Lwe 091cfb48 c7bba58c 09b96aec 4665094 c7bb86f8 7696/8192 Checkheaps
Mwe 089da575 c7bc0894 09b96aec 0 c7bbec30 6624/8192 Quack process
Mwe 08a30612 c7bc8c14 09b96aec 29107 c7bc0da0 31888/32768 Session Manager
Mwe 08b358f5 c7bd374c c97cbc38 6 c7bcfcf8 14296/16384 uauth
Mwe 08ad3405 c7bd5d24 09b07ee0 0 c7bd3e20 7376/8192 Uauth_Proxy
Msp 08b090fc c7bddb94 09b96aec 10627 c7bdbc80 7808/8192 SSL
Mwe 08b33836 c7bdfcc4 09b0da04 0 c7bdddf0 7240/8192 SMTP
Mwe 08b2819d c7be1d04 09b0d988 500322 c7bdff60 4048/8192 Logger
Mwe 08b29438 c7be3ea4 09b96aec 0 c7be20d0 7568/8192 Syslog Retry Thread
Mwe 08b2459e c7be60d4 09b96aec 0 c7be4240 7344/8192 Thread Logger
Mwe 08d02692 c7bf4b34 09b407e8 0 c7bf2c50 7040/8192 vpnlb_thread
Mwe 082416cd c7bfb5fc 09b96aec 0 c7bf9778 7672/8192 TLS Proxy Inspector
Msi 08a49e53 c7c86ba4 09b96aec 249734 c7c84ca0 7792/8192 emweb/cifs_timer
Mwe 086222e7 c7cd986c 09ab014c 0 c7cd7978 7520/8192 netfs_mount_handler
Msi 084d7708 c79cc7bc 09b96aec 781469 c79ca8e8 7168/8192 arp_timer
Mwe 084e0fcc c79d917c 09bb7ce8 0 c79d72c8 7824/8192 arp_forward_thread
Mwe 08545af5 c79df59c 09bbcae0 42 c79dd718 7808/8192 Lic TMR
Mwe 08b388a1 c7a07594 09b0dc80 0 c7a056a0 7776/8192 tcp_fast
Mwe 08b3ba10 c7f5ca9c 09b0dc80 0 c7f5abb8 7760/8192 tcp_slow
Mwe 08b667d9 c7f6a78c 09b15b88 0 c7f68898 7872/8192 udp_timer
Mwe 080eb628 c79ff194 09b96aec 4 c79fd300 5956/8192 CTCP Timer process
Mwe 08cb2b73 c7a013d4 09b96aec 0 c79ff560 7728/8192 L2TP data daemon
Mwe 08cb3943 c84ff80c 09b96aec 0 c84fd988 7744/8192 L2TP mgmt daemon
Mwe 08c9f9fb c8537944 09b3a724 42753 c8533a90 16048/16384 ppp_timer_thread
Msi 08d02b17 c853998c 09b96aec 280020 c8537ab8 7744/8192 vpnlb_timer_thread
Mwe 08101277 c79ce8ec c7a03370 21681 c79cca58 3640/8192 IPsec message handler
Msi 08112c5c c7bd7e54 09b96aec 6321034 c7bd5f90 5620/8192 CTM message handler
Mwe 088eb939 c79d0a2c 09b96aec 77 c79cebc8 5276/8192 NAT security-level reconfiguration
Mwe 08a054e8 c8722a0c 09b96aec 0 c8720b68 7776/8192 ICMP event handler
Mwe 08774e43 c8726bcc 09b96aec 411457 c8722d28 14860/16384 IP Background
Mwe 08174789 c878e604 09a8db38 94697 c876e7c0 121036/131072 tmatch compile thread
Mwe 089186f5 c98937ec 09b96aec 0 c988f938 15912/16384 Crypto PKI RECV
Mwe 0891beca c9899534 09b96aec 0 c98956a0 15880/16384 Crypto CA
Mwe 08951203 c989d6b4 09b96aec 0 c9899810 15896/16384 CERT API
Lsi 0882c918 c98d5a8c 09b96aec 3234 c98d3b78 7808/8192 uauth_urlb clean
Lwe 08814c4f c9ae596c 09b96aec 970543 c9ae3af8 4212/8192 pm_timer_thread
Mwe 08468fb5 c9ae7c34 09b96aec 891935 c9ae5da0 7656/8192 IKE Timekeeper
Mwe 0845ca3b c9aed134 09aab554 3307015 c9ae9560 9556/16384 IKE Daemon
Mwe 08ae5cfa c9af0dec 09b0c5f4 0 c9aeef08 7872/8192 RADIUS Proxy Event Daemon
Mwe 08ab4dbb c9af2e1c c7bf5df8 401 c9af1078 7032/8192 RADIUS Proxy Listener
Mwe 08ae48f7 c9af507c 09b96aec 0 c9af31e8 7760/8192 RADIUS Proxy Time Keeper
Mwe 084c84fc c9af7ed4 09bb7c68 0 c9af6090 7024/8192 Integrity FW Task
Mwe 081940ab c9b32edc 096cae3c 0 c9b136d8 124996/131072 ci/console
Msi 0839cc78 c9b3570c 09b96aec 80812 c9b33848 6296/8192 fover_thread
Mwe 08c877e5 c9b3784c 09d3d110 9202 c9b359b8 7500/8192 lu_ctl
Msi 0884e62c c9b3981c 09b96aec 3183982 c9b37b28 6072/8192 update_cpu_usage
Msi 0884997c c9b43c74 09b96aec 10368433 c9b41e40 5740/8192 NIC status poll
Mwe 083917cc c7bbc6f4 09baac00 0 c7bba950 7552/8192 fover_rx
Mwe 0838da13 c7bea3bc 09bab594 0 c7be8508 7824/8192 fover_tx
Mwe 0838cace c79fae3c 09bb8348 0 c79f8f58 7848/8192 fover_ip
Mwe 083a2a71 c9b5bf9c 09bab5a8 0 c9b582b8 15552/16384 fover_rep
Mwe 0839b33d c9b63e94 09bab5b0 133804 c9b5c2e0 31652/32768 fover_parse
Mwe 0837b737 c9b6618c 09baa6d8 33480 c9b64308 7808/8192 fover_ifc_test
Mwe 0837fd25 c9b681c4 09b96aec 0 c9b66330 7760/8192 fover_health_monitoring_thread
Mwe 083b4f90 c9b6c414 09b96aec 0 c9b6a580 7760/8192 ha_trans_ctl_tx
Mwe 083b4f90 c9b7f464 09b96aec 0 c9b7d5d0 7760/8192 ha_trans_data_tx
Mwe 083ac457 c9b8749c 09b96aec 0 c9b7f5f8 32096/32768 fover_FSM_thread
Mwe 08c8720b c9b8a49c 09bb7da8 0 c9b88598 7832/8192 lu_rx
Lwe 08c8713c c9b8c4d4 09d3cfc0 0 c9b8a5c0 7920/8192 lu_dynamic_sync
Mwe 08a7c1b3 c9b9145c 09aff9c0 1657 c9b8f568 7736/8192 SNMP Notify Thread
Mwe 08b874cd c9c0dc4c 09b96aec 114 c9b91590 24816/32768 rtcli async executor process
Mwe 084d2aa6 c9dcb594 09bb83b4 641375 c9dc76c0 12520/16384 IP Thread
Mwe 084d93be c9dcd724 09bb7d68 507142 c9dcb830 4776/8192 ARP Thread
Mwe 083fdfde c9e789cc 09bb83a0 109906 c9e76b78 4260/8192 icmp_thread
Mwe 08b67756 c9e7aa34 09b96aec 198645 c9e78ba0 7688/8192 udp_thread
Mwe 08b3d9ec c9e7c91c 09bb83bc 0 c9e7abc8 7472/8192 tcp_thread
Mwe 08b477e3 c9e7ea84 09b96aec 10276 c9e7cbf0 5300/8192 npshim_thread
Mwe 08ab4dbb c9f83f44 c79d2eb8 423 c9f82190 7368/8192 EAPoUDP-sock
Mwe 081ba105 c9f85e64 09b96aec 1 c9f84300 6872/8192 EAPoUDP
Lwe 08187a96 c79d4e1c 09b96aec 3438 c79d2f88 7696/8192 dns_cache_timer
Mwe 0818564a c9f5f8dc 09b96aec 0 c9f5daa8 7592/8192 dns_process
Mwe 089e5fb3 ca0b2614 09afb964 8872 ca0b0790 4552/8192 radius_snd
Mwe 08b66888 ca0b4014 c7f685dc 2852 ca0b2900 4632/8192 radius_rcv_auth
Mwe 08b66888 ca0b6184 c7f68524 0 ca0b4a70 5336/8192 radius_rcv_acct
Mwe 08b488f4 ca0c0974 ca0bec50 0 ca0bec80 7376/8192 tacplus_get
Mwe 089f96c8 ca0c4ce4 09afc0f8 0 ca0c0df0 16080/16384 tacplus_snd
Mwe 08b874cd ca3d2dcc 09b96aec 1164 ca3c5fb8 4012/8192 Unicorn Admin Thread
Mwe 08b66888 ca4bd084 c7f683b4 5436389 ca4bb870 2068/8192 snmp
Mwe 08ab4dbb ca4e0f8c ca53a028 230039 ca4df1e8 5400/8192 IKE Receiver
Mwe 08b488f4 ca53c48c ca53a7a8 66 ca53a7d8 6760/8192 listen/telnet
Mwe 08b488f4 ca5460dc c9f73448 18526 ca544428 6760/8192 listen/ssh
Mwe 0819c751 ca54a514 09b96aec 6145 ca548670 7712/8192 DHCPD Timer
Mwe 0819e2be ca550d9c 09b96aec 0 ca54ef58 7176/8192 dhcp_daemon
Mwe 0870caa3 ca566bd4 09b96aec 682938 ca564d40 4500/8192 NTP
Mwe 08ce31dd ca703bdc 09b40508 0 ca6fbce8 32464/32768 vpnfol_thread_msg
Msi 08ce9182 ca5f7eec 09b96aec 159827 ca5f6008 7760/8192 vpnfol_thread_timer
Mwe 08ce7682 ca705ba4 09b40680 0 ca703d10 7792/8192 vpnfol_thread_sync
Msi 08ce8d0c ca707c2c 09b96aec 859025 ca705d38 7776/8192 vpnfol_thread_unsent
Mwe 084c4888 c7bf0804 09b96aec 0 c7bee970 7760/8192 Integrity Fw Timer Thread
Msi 086223bc ca927ba4 09b96aec 14729 ca925cc0 7752/8192 netfs_vnode_reclaim
Mwe 08afa31b caa14b3c 09b96aec 789 caa12ca8 5060/8192 ssh/timer
M* 087d8be5 c246c91c 09b96cfc 368 cc9cb1d8 23016/32768 telnet/ci
- - - - 61934853531 - - scheduler
- - - - 64535052485 - - total elapsed

------------------ show kernel process ------------------

PID PPID PRI NI VSIZE RSS WCHAN STAT RUNTIME COMMAND
1 0 21 0 1560576 508 3725684979 S 80 init
2 1 34 19 0 0 3725694381 S 0 ksoftirqd/0
3 1 10 -5 0 0 3725736671 S 0 events/0
4 1 10 -5 0 0 3725736671 S 0 khelper
5 1 20 -5 0 0 3725736671 S 0 kthread
7 5 10 -5 0 0 3725736671 S 0 kblockd/0
8 5 20 -5 0 0 3726735694 S 0 kseriod
63 5 20 0 0 0 3725811768 S 0 pdflush
64 5 15 0 0 0 3725811768 S 0 pdflush
65 1 25 0 0 0 3725824451 S 0 kswapd0
66 5 20 -5 0 0 3725736671 S 0 aio/0
175 1 17 0 1560576 116 3725684979 S 0 init
176 175 23 0 1552384 508 3725684979 S 0 rcS
183 1 21 -4 1523712 508 0 S 11 udevd
301 1 23 -2 0 0 3725683158 Z 0 modprobe
308 1 23 -2 0 0 3725683158 Z 0 modprobe
311 1 23 -2 0 0 3725683158 Z 0 modprobe
332 1 23 -2 0 0 3725683158 Z 0 modprobe
335 1 23 -2 0 0 3725683158 Z 0 modprobe
314 1 23 -2 0 0 3725683158 Z 0 modprobe
346 1 23 -2 0 0 3725683158 Z 0 modprobe
361 176 23 0 1552384 476 3725684979 S 0 S99asa
362 361 25 0 1548288 472 3725684979 S 0 rcS
383 362 25 0 10072064 436 3725712932 S 0 lina_monitor
384 383 16 0 10072064 436 0 S 0 lina_monitor
385 384 25 0 10072064 436 3726342344 S 0 lina_monitor
386 383 15 0 483536896 375324 3725716348 S 87 lina
387 386 15 0 483536896 375324 0 S 1 lina
388 387 16 0 483536896 375324 0 S 0 lina
389 387 15 0 483536896 375324 3725716348 S 126 lina
390 387 25 0 483536896 375324 0 R 1714365414 lina

------------------ show failover ------------------

Failover Off
Failover unit Secondary
Failover LAN Interface: not Configured
Unit Poll frequency 1 seconds, holdtime 15 seconds
Interface Poll frequency 5 seconds, holdtime 25 seconds
Interface Policy 1
Monitored Interfaces 5 of 250 maximum

------------------ show failover history ------------------

==========================================================================
From State To State Reason
==========================================================================
12:47:37 gmt Dec 28 2013
Not Detected Disabled No Error

==========================================================================

------------------ show traffic ------------------

Outside:
received (in 93383.250 secs):
84944216350 packets 72787410477771 bytes
909032 pkts/sec 779448016 bytes/sec
transmitted (in 93383.250 secs):
85355334995 packets 34176792601670 bytes
914032 pkts/sec 365984000 bytes/sec
1 minute input rate 3485 pkts/sec, 3160872 bytes/sec
1 minute output rate 2902 pkts/sec, 372836 bytes/sec
1 minute drop rate, 168 pkts/sec
5 minute input rate 2884 pkts/sec, 2820432 bytes/sec
5 minute output rate 2440 pkts/sec, 332630 bytes/sec
5 minute drop rate, 112 pkts/sec
hongkong:
received (in 93383.640 secs):
1464994912 packets 1360714982566 bytes
15044 pkts/sec 14571005 bytes/sec
transmitted (in 93383.640 secs):
1116254150 packets 136241089327 bytes
11033 pkts/sec 1458019 bytes/sec
1 minute input rate 258 pkts/sec, 240504 bytes/sec
1 minute output rate 197 pkts/sec, 17909 bytes/sec
1 minute drop rate, 1 pkts/sec
5 minute input rate 120 pkts/sec, 88603 bytes/sec
5 minute output rate 108 pkts/sec, 23488 bytes/sec
5 minute drop rate, 1 pkts/sec
management:
received (in 93383.640 secs):
0 packets 0 bytes
0 pkts/sec 0 bytes/sec
transmitted (in 93383.640 secs):
0 packets 0 bytes
0 pkts/sec 0 bytes/sec
1 minute input rate 0 pkts/sec, 0 bytes/sec
1 minute output rate 0 pkts/sec, 0 bytes/sec
1 minute drop rate, 0 pkts/sec
5 minute input rate 0 pkts/sec, 0 bytes/sec
5 minute output rate 0 pkts/sec, 0 bytes/sec
5 minute drop rate, 0 pkts/sec
Inside:
received (in 93383.640 secs):
91936703473 packets 34471215007290 bytes
984045 pkts/sec 369135022 bytes/sec
transmitted (in 93383.640 secs):
87406986443 packets 72835987150458 bytes
935033 pkts/sec 779965037 bytes/sec
1 minute input rate 3444 pkts/sec, 419788 bytes/sec
1 minute output rate 3850 pkts/sec, 3317401 bytes/sec
1 minute drop rate, 273 pkts/sec
5 minute input rate 2853 pkts/sec, 416826 bytes/sec
5 minute output rate 3112 pkts/sec, 2886522 bytes/sec
5 minute drop rate, 224 pkts/sec
DMZ:
received (in 93383.980 secs):
633985319 packets 355879905605 bytes
6007 pkts/sec 3810011 bytes/sec
transmitted (in 93383.980 secs):
570527016 packets 276083292773 bytes
6017 pkts/sec 2956017 bytes/sec
1 minute input rate 128 pkts/sec, 24222 bytes/sec
1 minute output rate 97 pkts/sec, 19089 bytes/sec
1 minute drop rate, 0 pkts/sec
5 minute input rate 113 pkts/sec, 55002 bytes/sec
5 minute output rate 106 pkts/sec, 51352 bytes/sec
5 minute drop rate, 0 pkts/sec

----------------------------------------
Aggregated Traffic on Physical Interface
----------------------------------------
GigabitEthernet0/0:
received (in 93383.980 secs):
84985925058 packets 74399654602616 bytes
910023 pkts/sec 796706001 bytes/sec
transmitted (in 93383.980 secs):
85350437643 packets 35855773475336 bytes
913007 pkts/sec 383960004 bytes/sec
1 minute input rate 3485 pkts/sec, 3228233 bytes/sec
1 minute output rate 2902 pkts/sec, 432998 bytes/sec
1 minute drop rate, 0 pkts/sec
5 minute input rate 2884 pkts/sec, 2875294 bytes/sec
5 minute output rate 2440 pkts/sec, 382390 bytes/sec
5 minute drop rate, 0 pkts/sec
GigabitEthernet0/1:
received (in 93380.420 secs):
91940111596 packets 36291818304182 bytes
984023 pkts/sec 388644011 bytes/sec
transmitted (in 93380.420 secs):
87406988068 packets 74506269678212 bytes
936031 pkts/sec 797878011 bytes/sec
1 minute input rate 3444 pkts/sec, 491585 bytes/sec
1 minute output rate 3850 pkts/sec, 3392042 bytes/sec
1 minute drop rate, 0 pkts/sec
5 minute input rate 2853 pkts/sec, 475447 bytes/sec
5 minute output rate 3112 pkts/sec, 2945992 bytes/sec
5 minute drop rate, 0 pkts/sec
GigabitEthernet0/2:
received (in 93380.410 secs):
634048016 packets 368126130744 bytes
6008 pkts/sec 3942036 bytes/sec
transmitted (in 93380.410 secs):
570527019 packets 287144128265 bytes
6017 pkts/sec 3074027 bytes/sec
1 minute input rate 128 pkts/sec, 26834 bytes/sec
1 minute output rate 97 pkts/sec, 20958 bytes/sec
1 minute drop rate, 0 pkts/sec
5 minute input rate 113 pkts/sec, 57281 bytes/sec
5 minute output rate 106 pkts/sec, 53440 bytes/sec
5 minute drop rate, 0 pkts/sec
GigabitEthernet0/3:
received (in 93384.360 secs):
1465004805 packets 1387756983945 bytes
15044 pkts/sec 14860010 bytes/sec
transmitted (in 93384.360 secs):
1116254252 packets 159116391154 bytes
11033 pkts/sec 1703013 bytes/sec
1 minute input rate 258 pkts/sec, 245264 bytes/sec
1 minute output rate 197 pkts/sec, 21982 bytes/sec
1 minute drop rate, 0 pkts/sec
5 minute input rate 120 pkts/sec, 90856 bytes/sec
5 minute output rate 108 pkts/sec, 25677 bytes/sec
5 minute drop rate, 0 pkts/sec
Management0/0:
received (in 93384.700 secs):
0 packets 0 bytes
0 pkts/sec 0 bytes/sec
transmitted (in 93384.700 secs):
0 packets 0 bytes
0 pkts/sec 0 bytes/sec
1 minute input rate 0 pkts/sec, 0 bytes/sec
1 minute output rate 0 pkts/sec, 0 bytes/sec
1 minute drop rate, 0 pkts/sec
5 minute input rate 0 pkts/sec, 0 bytes/sec
5 minute output rate 0 pkts/sec, 0 bytes/sec
5 minute drop rate, 0 pkts/sec

------------------ show perfmon ------------------

PERFMON STATS: Current Average
Xlates 204/s 0/s
Connections 382/s 0/s
TCP Conns 304/s 0/s
UDP Conns 73/s 0/s
URL Access 0/s 0/s
URL Server Req 0/s 0/s
TCP Fixup 0/s 0/s
TCP Intercept Established Conns 0/s 0/s
TCP Intercept Attempts 0/s 0/s
TCP Embryonic Conns Timeout 31/s 0/s
HTTP Fixup 0/s 0/s
FTP Fixup 0/s 0/s
AAA Authen 0/s 0/s
AAA Author 0/s 0/s
AAA Account 0/s 0/s

VALID CONNS RATE in TCP INTERCEPT: Current Average
N/A 9.00%

------------------ show counters ------------------

Protocol Counter Value Context
IP IN_PKTS 44698879 Summary
IP OUT_PKTS 1151462843 Summary
IP IN_DROP_NFU 69 Summary
IP OUT_DROP_DWN 48 Summary
IP TO_ARP 6911773 Summary
IP TO_UDP 35205212 Summary
IP TO_ICMP 2581825 Summary
UDP IN_PKTS 35205212 Summary
UDP OUT_PKTS 45566696 Summary
UDP BD_CKSUM 691 Summary
ICMP IN_PKTS 2581825 Summary
ICMP OUT_PKTS 2522333 Summary
ICMP DROP_IGNORE 134 Summary
ICMP PORT_UNREACH 24501 Summary
ICMP FRAG_UNREACH 34 Summary
SSLERR BAD_PROTOCOL_VERSION_NUMBER 4 Summary
SSLERR BAD_SIGNATURE 2 Summary
SSLDEV NEW_CTX 1 Summary
SSLNP OPEN_CONN 2 Summary
IKE INV_SPI_SENT 533 Summary
NPSHIM GET_REQUEST 1686 Summary
NPSHIM GET_NONE 1144 Summary
NPSHIM GET_RECV 542 Summary
NPSHIM READ_CTX_CLOSED 29443 Summary
NPSHIM READ_NOBLOCK_NO_BUF 7193 Summary
NPSHIM READ_RECV 737372 Summary
NPSHIM READ_EOF 1544 Summary
NPSHIM SLCT_REQUEST 337224 Summary
NPSHIM SLCT_EVENT 337221 Summary
NPSHIM CTX_ALLOC 337194 Summary
NPSHIM CTX_FREE 337186 Summary
NPSHIM CONN_PEND 4033 Summary
NPSHIM CONN_PEND_PROCESS 4033 Summary
NPSHIM SEL_REMOVE_EVENT 70528 Summary
NPSHIM IOCTL_TCPFIP_FAIL 1512 Summary

------------------ show service-policy ------------------

Global policy:
Service-policy: global_policy
Class-map: inspection_default
Inspect: icmp, packet 2464954948, drop 305620, reset-drop 0
Inspect: dns _default_dns_map, packet 1741959891, drop 51088121, reset-drop 0
dns-guard, count 844258495
protocol-enforcement, drop 7939329
nat-rewrite, count 0
Inspect: ftp, packet 15891284, drop 151, reset-drop 32
Cmd not port drop 151
Inspect: h323 h225 _default_h323_map, packet 86663, drop 0, reset-drop 0
tcp-proxy: bytes in buffer 0, bytes dropped 627444
h245-tunnel-block drops 0 connection
Inspect: h323 ras _default_h323_map, packet 45997, drop 29339, reset-drop 0
h245-tunnel-block drops 0 connection
Inspect: rsh, packet 3885, drop 0, reset-drop 0
Inspect: rtsp, packet 20362500, drop 0, reset-drop 0
tcp-proxy: bytes in buffer 0, bytes dropped 0
Inspect: sqlnet, packet 29312696, drop 0, reset-drop 0
Inspect: skinny , packet 35283, drop 0, reset-drop 0
tcp-proxy: bytes in buffer 0, bytes dropped 1009298
Inspect: sunrpc, packet 29760, drop 18, reset-drop 62
tcp-proxy: bytes in buffer 0, bytes dropped 0
Inspect: xdmcp, packet 1273, drop 1243, reset-drop 0
Inspect: sip , packet 619979, drop 240, reset-drop 0
tcp-proxy: bytes in buffer 0, bytes dropped 54793
Inspect: netbios, packet 7874694, drop 0, reset-drop 0
Inspect: tftp, packet 99612, drop 45, reset-drop 0
Class-map: tcp-options
Set connection policy: drop 0
Set connection advanced-options: buffer
Retransmission drops: 0 TCP checksum drops : 0
Exceeded MSS drops : 0 SYN with data drops: 0
Invalid ACK drops : 0 SYN-ACK with data drops: 0
Out-of-order (OoO) packets : 0 OoO no buffer drops: 0
OoO buffer timeout drops : 0 SEQ past window drops: 0
Reserved bit cleared: 0 Reserved bit drops : 0
IP TTL modified : 0 Urgent flag cleared: 0
Window varied resets: 0
TCP-options:
Selective ACK cleared: 0 Timestamp cleared : 0
Window scale cleared : 0
Other options cleared: 0
Other options drops: 0

------------------ show mode ------------------

Security context mode: single

------------------ show history ------------------

en
sh tech-support

------------------ show firewall ------------------

Firewall mode: Router

----------------- show startup-config errors ------------------

WARNING: BOOT variable added, but unable to find disk0:/asa804-k8.bin
*** Output from config line 46, "boot system disk0:/asa80..."
nat 0 10.1.0.109 will be identity translated for outbound
*** Output from config line 271, "nat (Inside) 0 10.1.0.10..."
nat 0 10.1.0.139 will be identity translated for outbound
*** Output from config line 276, "nat (Inside) 0 10.1.0.13..."
nat 0 10.1.0.194 will be identity translated for outbound
*** Output from config line 278, "nat (Inside) 0 10.1.0.19..."
nat 0 10.1.1.93 will be identity translated for outbound
*** Output from config line 285, "nat (Inside) 0 10.1.1.93..."

------------------ console logs ------------------

Message #1 : Message #2 :
Total SSMs found: 0
Message #3 :
Total NICs found: 7
Message #4 : mcwa Message #5 : i82557 Ethernet at irq 11Message #6 : MAC: 0017.9526.f1f5
Message #7 : mcwa Message #8 : i82557 Ethernet at irq 5Message #9 : MAC: 0000.0001.0001
Message #10 : i82546GB rev03 Gigabit Ethernet @ irq09 dev 3 index 00Message #11 : MAC: 0017.9526.f1f6
Message #12 : i82546GB rev03 Gigabit Ethernet @ irq09 dev 3 index 01Message #13 : MAC: 0017.9526.f1f7
Message #14 : i82546GB rev03 Gigabit Ethernet @ irq09 dev 2 index 02Message #15 : MAC: 0017.9526.f1f8
Message #16 : i82546GB rev03 Gigabit Ethernet @ irq09 dev 2 index 03Message #17 : MAC: 0017.9526.f1f9
Message #18 : i82547GI rev00 Gigabit Ethernet @ irq11 dev 1 index 05Message #19 : MAC: 0000.0001.0002
Message #20 :
Licensed features for this platform:
Message #21 : Maximum Physical Interfaces : Unlimited
Message #22 : Maximum VLANs : 150
Message #23 : Inside Hosts : Unlimited
Message #24 : Failover : Active/Active
Message #25 : VPN-DES : Enabled
Message #26 : VPN-3DES-AES : Enabled
Message #27 : Security Contexts : 2
Message #28 : GTP/GPRS : Disabled
Message #29 : VPN Peers : 750
Message #30 : WebVPN Peers : 2
Message #31 : AnyConnect for Mobile : Disabled
Message #32 : AnyConnect for Linksys phone : Disabled
Message #33 : Advanced Endpoint Assessment : Disabled
Message #34 : UC Proxy Sessions : 2
Message #35 :
This platform has an ASA 5520 VPN Plus license.
Message #36 :
Message #37 : Encryption hardware device : Cisco ASA-55x0 on-board accelerator (revision 0x0)
Message #38 : Boot microcode : CN1000-MC-BOOT-2.00
Message #39 : SSL/IKE microcode: CNLite-MC-SSLm-PLUS-2.03
Message #40 : IPSec microcode : CNlite-MC-IPSECm-MAIN-2.05
Message #41 :
Cisco Adaptive Security Appliance Software Version 8.0(5)
Message #42 :
Message #43 : ****************************** Warning *******************************
Message #44 : This product contains cryptographic features and is
Message #45 : subject to United States and local country laws
Message #46 : governing, import, export, transfer, and use.
Message #47 : Delivery of Cisco cryptographic products does not
Message #48 : imply third-party authority to import, export,
Message #49 : distribute, or use encryption. Importers, exporters,
Message #50 : distributors and users are responsible for compliance
Message #51 : with U.S. and local country laws. By using this
Message #52 : product you agree to comply with applicable laws and
Message #53 : regulations. If you are unable to comply with U.S.
Message #54 : and local laws, return the enclosed items immediately.
Message #55 :
Message #56 : A summary of U.S. laws governing Cisco cryptographic
Message #57 : products may be found at:
Message #58 : http://www.cisco.com/wwl/export/crypto/tool/stqrg.html
Message #59 :
Message #60 : If you require further assistance please contact us by
Message #61 : sending email to export@cisco.com.
Message #62 : ******************************* Warning *******************************
Message #63 :
Message #64 : Copyright (c) 1996-2009 by Cisco Systems, Inc.

Message #65 : Restricted Rights Legend

Message #66 : Use, duplication, or disclosure by the Government is
Message #67 : subject to restrictions as set forth in subparagraph
Message #68 : (c) of the Commercial Computer Software - Restricted
Message #69 : Rights clause at FAR sec. 52.227-19 and subparagraph
Message #70 : (c) (1) (ii) of the Rights in Technical Data and Computer
Message #71 : Software clause at DFARS sec. 252.227-7013.

Message #72 : Cisco Systems, Inc.
Message #73 : 170 West Tasman Drive
Message #74 : San Jose, California 95134-1706

hshzhu101 · ‎01-14-2016

Have any ideas?it's strange.

ramyraj2 · ‎01-14-2016

Initiate some traffic and provide me the below outputs from both boxes:

sh cry isa sa

sh cry ipsec sa peer <peer address>

hshzhu101 · ‎01-14-2016

Site A:

sh crypto isakmp sa

IKEv1 SAs:

Active SA: 2
Rekey SA: 0 (A tunnel will report 1 Active and 1 Rekey SA during rekey)
Total IKE SA: 2

1 IKE Peer: 116.246.25.164
Type : L2L Role : initiator
Rekey : no State : MM_ACTIVE
2 IKE Peer: 101.82.4.236
Type : user Role : responder
Rekey : no State : AM_ACTIVE

sh crypto ipsec sa peer 101.82.4.236
peer address: 101.82.4.236
Crypto map tag: dyn1, seq num: 65534, local addr: 173.11.91.117

local ident (addr/mask/prot/port): (0.0.0.0/0.0.0.0/0/0)
remote ident (addr/mask/prot/port): (10.1.84.102/255.255.255.255/0/0)
current_peer: 101.82.4.236, username: test
dynamic allocated peer ip: 10.1.84.102

#pkts encaps: 0, #pkts encrypt: 0, #pkts digest: 0
#pkts decaps: 4, #pkts decrypt: 4, #pkts verify: 4
#pkts compressed: 0, #pkts decompressed: 0
#pkts not compressed: 0, #pkts comp failed: 0, #pkts decomp failed: 0
#pre-frag successes: 0, #pre-frag failures: 0, #fragments created: 0
#PMTUs sent: 0, #PMTUs rcvd: 0, #decapsulated frgs needing reassembly: 0
#TFC rcvd: 0, #TFC sent: 0
#Valid ICMP Errors rcvd: 0, #Invalid ICMP Errors rcvd: 0
#send errors: 0, #recv errors: 0

local crypto endpt.: 173.11.91.117/0, remote crypto endpt.: 101.82.4.236/0
path mtu 1500, ipsec overhead 74(44), media mtu 1500
PMTU time remaining (sec): 0, DF policy: copy-df
ICMP error validation: disabled, TFC packets: disabled
current outbound spi: FCCB16DB
current inbound spi : 8D18A6AF

inbound esp sas:
spi: 0x8D18A6AF (2367202991)
transform: esp-aes esp-sha-hmac no compression
in use settings ={RA, Tunnel, IKEv1, }
slot: 0, conn_id: 3928064, crypto-map: dyn1
sa timing: remaining key lifetime (sec): 28665
IV size: 16 bytes
replay detection support: Y
Anti replay bitmap:
0x00000000 0x0000001F
outbound esp sas:
spi: 0xFCCB16DB (4241168091)
transform: esp-aes esp-sha-hmac no compression
in use settings ={RA, Tunnel, IKEv1, }
slot: 0, conn_id: 3928064, crypto-map: dyn1
sa timing: remaining key lifetime (sec): 28665
IV size: 16 bytes
replay detection support: Y
Anti replay bitmap:
0x00000000 0x00000001

sh crypto ipsec sa peer 116.246.25.164
peer address: 116.246.25.164
Crypto map tag: Outside1_map, seq num: 1, local addr: 173.11.91.117

access-list Outside1_cryptomap extended permit ip 10.24.10.0 255.255.255.0 10.1.0.0 255.255.255.0
local ident (addr/mask/prot/port): (10.24.10.0/255.255.255.0/0/0)
remote ident (addr/mask/prot/port): (10.1.0.0/255.255.255.0/0/0)
current_peer: 116.246.25.164

#pkts encaps: 94055, #pkts encrypt: 94055, #pkts digest: 94055
#pkts decaps: 91006, #pkts decrypt: 91006, #pkts verify: 91006
#pkts compressed: 0, #pkts decompressed: 0
#pkts not compressed: 94055, #pkts comp failed: 0, #pkts decomp failed: 0
#pre-frag successes: 0, #pre-frag failures: 0, #fragments created: 0
#PMTUs sent: 0, #PMTUs rcvd: 0, #decapsulated frgs needing reassembly: 0
#TFC rcvd: 0, #TFC sent: 0
#Valid ICMP Errors rcvd: 0, #Invalid ICMP Errors rcvd: 0
#send errors: 0, #recv errors: 0

local crypto endpt.: 173.11.91.117/0, remote crypto endpt.: 116.246.25.164/0
path mtu 1500, ipsec overhead 74(44), media mtu 1500
PMTU time remaining (sec): 0, DF policy: copy-df
ICMP error validation: disabled, TFC packets: disabled
current outbound spi: BDE95812
current inbound spi : 3783B778

inbound esp sas:
spi: 0x3783B778 (931379064)
transform: esp-aes-256 esp-sha-hmac no compression
in use settings ={L2L, Tunnel, IKEv1, }
slot: 0, conn_id: 3862528, crypto-map: Outside1_map
sa timing: remaining key lifetime (kB/sec): (4369446/4574)
IV size: 16 bytes
replay detection support: Y
Anti replay bitmap:
0xFFFFFFFF 0xFFFFFFFF
outbound esp sas:
spi: 0xBDE95812 (3186186258)
transform: esp-aes-256 esp-sha-hmac no compression
in use settings ={L2L, Tunnel, IKEv1, }
slot: 0, conn_id: 3862528, crypto-map: Outside1_map
sa timing: remaining key lifetime (kB/sec): (4370634/4574)
IV size: 16 bytes
replay detection support: Y
Anti replay bitmap:
0x00000000 0x00000001

Crypto map tag: Outside1_map, seq num: 1, local addr: 173.11.91.117

access-list Outside1_cryptomap extended permit ip 10.24.10.0 255.255.255.0 10.1.1.0 255.255.255.0
local ident (addr/mask/prot/port): (10.24.10.0/255.255.255.0/0/0)
remote ident (addr/mask/prot/port): (10.1.1.0/255.255.255.0/0/0)
current_peer: 116.246.25.164

#pkts encaps: 7400, #pkts encrypt: 7400, #pkts digest: 7400
#pkts decaps: 7162, #pkts decrypt: 7162, #pkts verify: 7162
#pkts compressed: 0, #pkts decompressed: 0
#pkts not compressed: 7400, #pkts comp failed: 0, #pkts decomp failed: 0
#pre-frag successes: 0, #pre-frag failures: 0, #fragments created: 0
#PMTUs sent: 0, #PMTUs rcvd: 0, #decapsulated frgs needing reassembly: 0
#TFC rcvd: 0, #TFC sent: 0
#Valid ICMP Errors rcvd: 0, #Invalid ICMP Errors rcvd: 0
#send errors: 0, #recv errors: 0

local crypto endpt.: 173.11.91.117/0, remote crypto endpt.: 116.246.25.164/0
path mtu 1500, ipsec overhead 74(44), media mtu 1500
PMTU time remaining (sec): 0, DF policy: copy-df
ICMP error validation: disabled, TFC packets: disabled
current outbound spi: B4F7E3F6
current inbound spi : 18829141

inbound esp sas:
spi: 0x18829141 (411210049)
transform: esp-aes-256 esp-sha-hmac no compression
in use settings ={L2L, Tunnel, IKEv1, }
slot: 0, conn_id: 3862528, crypto-map: Outside1_map
sa timing: remaining key lifetime (kB/sec): (4373478/4694)
IV size: 16 bytes
replay detection support: Y
Anti replay bitmap:
0xFFFFFFFF 0xFFFFFFFF
outbound esp sas:
spi: 0xB4F7E3F6 (3036144630)
transform: esp-aes-256 esp-sha-hmac no compression
in use settings ={L2L, Tunnel, IKEv1, }
slot: 0, conn_id: 3862528, crypto-map: Outside1_map
sa timing: remaining key lifetime (kB/sec): (4373437/4694)
IV size: 16 bytes
replay detection support: Y
Anti replay bitmap:
0x00000000 0x00000001

Crypto map tag: Outside1_map, seq num: 1, local addr: 173.11.91.117

access-list Outside1_cryptomap extended permit ip 10.24.15.0 255.255.255.0 10.1.1.0 255.255.255.0
local ident (addr/mask/prot/port): (10.24.15.0/255.255.255.0/0/0)
remote ident (addr/mask/prot/port): (10.1.1.0/255.255.255.0/0/0)
current_peer: 116.246.25.164

#pkts encaps: 9448, #pkts encrypt: 9448, #pkts digest: 9448
#pkts decaps: 9669, #pkts decrypt: 9669, #pkts verify: 9669
#pkts compressed: 0, #pkts decompressed: 0
#pkts not compressed: 9448, #pkts comp failed: 0, #pkts decomp failed: 0
#pre-frag successes: 0, #pre-frag failures: 0, #fragments created: 0
#PMTUs sent: 0, #PMTUs rcvd: 0, #decapsulated frgs needing reassembly: 0
#TFC rcvd: 0, #TFC sent: 0
#Valid ICMP Errors rcvd: 0, #Invalid ICMP Errors rcvd: 0
#send errors: 0, #recv errors: 0

local crypto endpt.: 173.11.91.117/0, remote crypto endpt.: 116.246.25.164/0
path mtu 1500, ipsec overhead 74(44), media mtu 1500
PMTU time remaining (sec): 0, DF policy: copy-df
ICMP error validation: disabled, TFC packets: disabled
current outbound spi: 226F3E4E
current inbound spi : 07394B6B

inbound esp sas:
spi: 0x07394B6B (121195371)
transform: esp-aes-256 esp-sha-hmac no compression
in use settings ={L2L, Tunnel, IKEv1, }
slot: 0, conn_id: 3862528, crypto-map: Outside1_map
sa timing: remaining key lifetime (kB/sec): (4373176/18298)
IV size: 16 bytes
replay detection support: Y
Anti replay bitmap:
0xFFFFFFFF 0xFFFFFFFF
outbound esp sas:
spi: 0x226F3E4E (577715790)
transform: esp-aes-256 esp-sha-hmac no compression
in use settings ={L2L, Tunnel, IKEv1, }
slot: 0, conn_id: 3862528, crypto-map: Outside1_map
sa timing: remaining key lifetime (kB/sec): (4373529/18298)
IV size: 16 bytes
replay detection support: Y
Anti replay bitmap:
0x00000000 0x00000001

Crypto map tag: Outside1_map, seq num: 1, local addr: 173.11.91.117

access-list Outside1_cryptomap extended permit ip 10.24.15.0 255.255.255.0 10.1.0.0 255.255.255.0
local ident (addr/mask/prot/port): (10.24.15.0/255.255.255.0/0/0)
remote ident (addr/mask/prot/port): (10.1.0.0/255.255.255.0/0/0)
current_peer: 116.246.25.164

#pkts encaps: 252964, #pkts encrypt: 252964, #pkts digest: 252964
#pkts decaps: 375168, #pkts decrypt: 375168, #pkts verify: 375168
#pkts compressed: 0, #pkts decompressed: 0
#pkts not compressed: 252978, #pkts comp failed: 0, #pkts decomp failed: 0
#pre-frag successes: 0, #pre-frag failures: 0, #fragments created: 0
#PMTUs sent: 0, #PMTUs rcvd: 0, #decapsulated frgs needing reassembly: 0
#TFC rcvd: 0, #TFC sent: 0
#Valid ICMP Errors rcvd: 0, #Invalid ICMP Errors rcvd: 0
#send errors: 0, #recv errors: 0

local crypto endpt.: 173.11.91.117/0, remote crypto endpt.: 116.246.25.164/0
path mtu 1500, ipsec overhead 74(44), media mtu 1500
PMTU time remaining (sec): 0, DF policy: copy-df
ICMP error validation: disabled, TFC packets: disabled
current outbound spi: FB4863C1
current inbound spi : E77C57A4

inbound esp sas:
spi: 0xE77C57A4 (3883685796)
transform: esp-aes-256 esp-sha-hmac no compression
in use settings ={L2L, Tunnel, IKEv1, }
slot: 0, conn_id: 3862528, crypto-map: Outside1_map
sa timing: remaining key lifetime (kB/sec): (3982171/14642)
IV size: 16 bytes
replay detection support: Y
Anti replay bitmap:
0xFFFFFFFF 0xFFFFFFFF
outbound esp sas:
spi: 0xFB4863C1 (4215825345)
transform: esp-aes-256 esp-sha-hmac no compression
in use settings ={L2L, Tunnel, IKEv1, }
slot: 0, conn_id: 3862528, crypto-map: Outside1_map
sa timing: remaining key lifetime (kB/sec): (4357117/14642)
IV size: 16 bytes
replay detection support: Y
Anti replay bitmap:
0x00000000 0x00000001

Crypto map tag: Outside1_map, seq num: 1, local addr: 173.11.91.117

access-list Outside1_cryptomap extended permit ip 10.24.24.0 255.255.255.0 10.1.1.0 255.255.255.0
local ident (addr/mask/prot/port): (10.24.24.0/255.255.255.0/0/0)
remote ident (addr/mask/prot/port): (10.1.1.0/255.255.255.0/0/0)
current_peer: 116.246.25.164

#pkts encaps: 4576, #pkts encrypt: 4576, #pkts digest: 4576
#pkts decaps: 4576, #pkts decrypt: 4576, #pkts verify: 4576
#pkts compressed: 0, #pkts decompressed: 0
#pkts not compressed: 4576, #pkts comp failed: 0, #pkts decomp failed: 0
#pre-frag successes: 0, #pre-frag failures: 0, #fragments created: 0
#PMTUs sent: 0, #PMTUs rcvd: 0, #decapsulated frgs needing reassembly: 0
#TFC rcvd: 0, #TFC sent: 0
#Valid ICMP Errors rcvd: 0, #Invalid ICMP Errors rcvd: 0
#send errors: 0, #recv errors: 0

local crypto endpt.: 173.11.91.117/0, remote crypto endpt.: 116.246.25.164/0
path mtu 1500, ipsec overhead 74(44), media mtu 1500
PMTU time remaining (sec): 0, DF policy: copy-df
ICMP error validation: disabled, TFC packets: disabled
current outbound spi: 18E83BEF
current inbound spi : 88A5E990

inbound esp sas:
spi: 0x88A5E990 (2292574608)
transform: esp-aes-256 esp-sha-hmac no compression
in use settings ={L2L, Tunnel, IKEv1, }
slot: 0, conn_id: 3862528, crypto-map: Outside1_map
sa timing: remaining key lifetime (kB/sec): (4373623/4782)
IV size: 16 bytes
replay detection support: Y
Anti replay bitmap:
0xFFFFFFFF 0xFFFFFFFF
outbound esp sas:
spi: 0x18E83BEF (417872879)
transform: esp-aes-256 esp-sha-hmac no compression
in use settings ={L2L, Tunnel, IKEv1, }
slot: 0, conn_id: 3862528, crypto-map: Outside1_map
sa timing: remaining key lifetime (kB/sec): (4373593/4781)
IV size: 16 bytes
replay detection support: Y
Anti replay bitmap:
0x00000000 0x00000001

Crypto map tag: Outside1_map, seq num: 1, local addr: 173.11.91.117

access-list Outside1_cryptomap extended permit ip 10.24.24.0 255.255.255.0 10.1.0.0 255.255.255.0
local ident (addr/mask/prot/port): (10.24.24.0/255.255.255.0/0/0)
remote ident (addr/mask/prot/port): (10.1.0.0/255.255.255.0/0/0)
current_peer: 116.246.25.164

#pkts encaps: 72094, #pkts encrypt: 72094, #pkts digest: 72094
#pkts decaps: 72098, #pkts decrypt: 72098, #pkts verify: 72098
#pkts compressed: 0, #pkts decompressed: 0
#pkts not compressed: 72094, #pkts comp failed: 0, #pkts decomp failed: 0
#pre-frag successes: 0, #pre-frag failures: 0, #fragments created: 0
#PMTUs sent: 0, #PMTUs rcvd: 0, #decapsulated frgs needing reassembly: 0
#TFC rcvd: 0, #TFC sent: 0
#Valid ICMP Errors rcvd: 0, #Invalid ICMP Errors rcvd: 0
#send errors: 0, #recv errors: 0

local crypto endpt.: 173.11.91.117/0, remote crypto endpt.: 116.246.25.164/0
path mtu 1500, ipsec overhead 74(44), media mtu 1500
PMTU time remaining (sec): 0, DF policy: copy-df
ICMP error validation: disabled, TFC packets: disabled
current outbound spi: 10CE955C
current inbound spi : 21167B7B

inbound esp sas:
spi: 0x21167B7B (555121531)
transform: esp-aes-256 esp-sha-hmac no compression
in use settings ={L2L, Tunnel, IKEv1, }
slot: 0, conn_id: 3862528, crypto-map: Outside1_map
sa timing: remaining key lifetime (kB/sec): (4372611/4572)
IV size: 16 bytes
replay detection support: Y
Anti replay bitmap:
0xFFFFFFFF 0xFFFFFFFF
outbound esp sas:
spi: 0x10CE955C (281974108)
transform: esp-aes-256 esp-sha-hmac no compression
in use settings ={L2L, Tunnel, IKEv1, }
slot: 0, conn_id: 3862528, crypto-map: Outside1_map
sa timing: remaining key lifetime (kB/sec): (4372611/4572)
IV size: 16 bytes
replay detection support: Y
Anti replay bitmap:
0x00000000 0x00000001

Site B:

sh crypto isakmp sa

Active SA: 3
Rekey SA: 0 (A tunnel will report 1 Active and 1 Rekey SA during rekey)
Total IKE SA: 3

1 IKE Peer: 116.237.45.162
Type : user Role : responder
Rekey : no State : AM_ACTIVE
2 IKE Peer: 211.144.213.104
Type : user Role : responder
Rekey : no State : AM_ACTIVE
3 IKE Peer: 173.11.91.117
Type : L2L Role : responder
Rekey : no State : MM_ACTIVE

sh crypto ipsec sa peer 173.11.91.117
peer address: 173.11.91.117
Crypto map tag: mymap, seq num: 90, local addr: 116.246.25.164

access-list AmericanOffice extended permit ip 10.1.0.0 255.255.255.0 10.24.24.0 255.255.255.0
local ident (addr/mask/prot/port): (10.1.0.0/255.255.255.0/0/0)
remote ident (addr/mask/prot/port): (10.24.24.0/255.255.255.0/0/0)
current_peer: 173.11.91.117

#pkts encaps: 72098, #pkts encrypt: 72098, #pkts digest: 72098
#pkts decaps: 71999, #pkts decrypt: 71999, #pkts verify: 71999
#pkts compressed: 0, #pkts decompressed: 0
#pkts not compressed: 72098, #pkts comp failed: 0, #pkts decomp failed: 0
#pre-frag successes: 0, #pre-frag failures: 0, #fragments created: 0
#PMTUs sent: 0, #PMTUs rcvd: 0, #decapsulated frgs needing reassembly: 0
#send errors: 0, #recv errors: 0

local crypto endpt.: 116.246.25.164, remote crypto endpt.: 173.11.91.117

path mtu 1500, ipsec overhead 74, media mtu 1500
current outbound spi: 21167B7B
current inbound spi : 10CE955C

inbound esp sas:
spi: 0x10CE955C (281974108)
transform: esp-aes-256 esp-sha-hmac no compression
in use settings ={L2L, Tunnel, }
slot: 0, conn_id: 187465728, crypto-map: mymap
sa timing: remaining key lifetime (kB/sec): (3913612/4497)
IV size: 16 bytes
replay detection support: Y
Anti replay bitmap:
0xFFFFFFFF 0xFFFFFFFF
outbound esp sas:
spi: 0x21167B7B (555121531)
transform: esp-aes-256 esp-sha-hmac no compression
in use settings ={L2L, Tunnel, }
slot: 0, conn_id: 187465728, crypto-map: mymap
sa timing: remaining key lifetime (kB/sec): (3913611/4497)
IV size: 16 bytes
replay detection support: Y
Anti replay bitmap:
0x00000000 0x00000001

Crypto map tag: mymap, seq num: 90, local addr: 116.246.25.164

access-list AmericanOffice extended permit ip 10.1.0.0 255.255.255.0 10.24.10.0 255.255.255.0
local ident (addr/mask/prot/port): (10.1.0.0/255.255.255.0/0/0)
remote ident (addr/mask/prot/port): (10.24.10.0/255.255.255.0/0/0)
current_peer: 173.11.91.117

#pkts encaps: 91118, #pkts encrypt: 91118, #pkts digest: 91118
#pkts decaps: 93748, #pkts decrypt: 93748, #pkts verify: 93748
#pkts compressed: 0, #pkts decompressed: 0
#pkts not compressed: 91118, #pkts comp failed: 0, #pkts decomp failed: 0
#pre-frag successes: 0, #pre-frag failures: 0, #fragments created: 0
#PMTUs sent: 0, #PMTUs rcvd: 0, #decapsulated frgs needing reassembly: 0
#send errors: 0, #recv errors: 0

local crypto endpt.: 116.246.25.164, remote crypto endpt.: 173.11.91.117

path mtu 1500, ipsec overhead 74, media mtu 1500
current outbound spi: 3783B778
current inbound spi : BDE95812

inbound esp sas:
spi: 0xBDE95812 (3186186258)
transform: esp-aes-256 esp-sha-hmac no compression
in use settings ={L2L, Tunnel, }
slot: 0, conn_id: 187465728, crypto-map: mymap
sa timing: remaining key lifetime (kB/sec): (3911627/4495)
IV size: 16 bytes
replay detection support: Y
Anti replay bitmap:
0xFFF7FFFF 0xFFFFFFFF
outbound esp sas:
spi: 0x3783B778 (931379064)
transform: esp-aes-256 esp-sha-hmac no compression
in use settings ={L2L, Tunnel, }
slot: 0, conn_id: 187465728, crypto-map: mymap
sa timing: remaining key lifetime (kB/sec): (3910426/4495)
IV size: 16 bytes
replay detection support: Y
Anti replay bitmap:
0x00000000 0x00000001

Crypto map tag: mymap, seq num: 90, local addr: 116.246.25.164

access-list AmericanOffice extended permit ip 10.1.0.0 255.255.255.0 10.24.15.0 255.255.255.0
local ident (addr/mask/prot/port): (10.1.0.0/255.255.255.0/0/0)
remote ident (addr/mask/prot/port): (10.24.15.0/255.255.255.0/0/0)
current_peer: 173.11.91.117

#pkts encaps: 381282, #pkts encrypt: 381282, #pkts digest: 381282
#pkts decaps: 255503, #pkts decrypt: 255503, #pkts verify: 255503
#pkts compressed: 0, #pkts decompressed: 0
#pkts not compressed: 381282, #pkts comp failed: 0, #pkts decomp failed: 0
#pre-frag successes: 0, #pre-frag failures: 0, #fragments created: 0
#PMTUs sent: 0, #PMTUs rcvd: 0, #decapsulated frgs needing reassembly: 0
#send errors: 0, #recv errors: 0

local crypto endpt.: 116.246.25.164, remote crypto endpt.: 173.11.91.117

path mtu 1500, ipsec overhead 74, media mtu 1500
current outbound spi: E77C57A4
current inbound spi : FB4863C1

inbound esp sas:
spi: 0xFB4863C1 (4215825345)
transform: esp-aes-256 esp-sha-hmac no compression
in use settings ={L2L, Tunnel, }
slot: 0, conn_id: 187465728, crypto-map: mymap
sa timing: remaining key lifetime (kB/sec): (3897996/14562)
IV size: 16 bytes
replay detection support: Y
Anti replay bitmap:
0xFFFFFFFF 0xFFFFFFFF
outbound esp sas:
spi: 0xE77C57A4 (3883685796)
transform: esp-aes-256 esp-sha-hmac no compression
in use settings ={L2L, Tunnel, }
slot: 0, conn_id: 187465728, crypto-map: mymap
sa timing: remaining key lifetime (kB/sec): (3515572/14562)
IV size: 16 bytes
replay detection support: Y
Anti replay bitmap:
0x00000000 0x00000001

Crypto map tag: mymap, seq num: 90, local addr: 116.246.25.164

access-list AmericanOffice extended permit ip 10.1.1.0 255.255.255.0 10.24.24.0 255.255.255.0
local ident (addr/mask/prot/port): (10.1.1.0/255.255.255.0/0/0)
remote ident (addr/mask/prot/port): (10.24.24.0/255.255.255.0/0/0)
current_peer: 173.11.91.117

#pkts encaps: 4576, #pkts encrypt: 4576, #pkts digest: 4576
#pkts decaps: 4566, #pkts decrypt: 4566, #pkts verify: 4566
#pkts compressed: 0, #pkts decompressed: 0
#pkts not compressed: 4576, #pkts comp failed: 0, #pkts decomp failed: 0
#pre-frag successes: 0, #pre-frag failures: 0, #fragments created: 0
#PMTUs sent: 0, #PMTUs rcvd: 0, #decapsulated frgs needing reassembly: 0
#send errors: 0, #recv errors: 0

local crypto endpt.: 116.246.25.164, remote crypto endpt.: 173.11.91.117

path mtu 1500, ipsec overhead 74, media mtu 1500
current outbound spi: 88A5E990
current inbound spi : 18E83BEF

inbound esp sas:
spi: 0x18E83BEF (417872879)
transform: esp-aes-256 esp-sha-hmac no compression
in use settings ={L2L, Tunnel, }
slot: 0, conn_id: 187465728, crypto-map: mymap
sa timing: remaining key lifetime (kB/sec): (3914593/4703)
IV size: 16 bytes
replay detection support: Y
Anti replay bitmap:
0xFFFFFFFF 0xFFFFFFFF
outbound esp sas:
spi: 0x88A5E990 (2292574608)
transform: esp-aes-256 esp-sha-hmac no compression
in use settings ={L2L, Tunnel, }
slot: 0, conn_id: 187465728, crypto-map: mymap
sa timing: remaining key lifetime (kB/sec): (3914623/4703)
IV size: 16 bytes
replay detection support: Y
Anti replay bitmap:
0x00000000 0x00000001

Crypto map tag: mymap, seq num: 90, local addr: 116.246.25.164

access-list AmericanOffice extended permit ip 10.1.1.0 255.255.255.0 10.24.15.0 255.255.255.0
local ident (addr/mask/prot/port): (10.1.1.0/255.255.255.0/0/0)
remote ident (addr/mask/prot/port): (10.24.15.0/255.255.255.0/0/0)
current_peer: 173.11.91.117

#pkts encaps: 9683, #pkts encrypt: 9683, #pkts digest: 9683
#pkts decaps: 9461, #pkts decrypt: 9461, #pkts verify: 9461
#pkts compressed: 0, #pkts decompressed: 0
#pkts not compressed: 9683, #pkts comp failed: 0, #pkts decomp failed: 0
#pre-frag successes: 0, #pre-frag failures: 0, #fragments created: 0
#PMTUs sent: 0, #PMTUs rcvd: 0, #decapsulated frgs needing reassembly: 0
#send errors: 0, #recv errors: 0

local crypto endpt.: 116.246.25.164, remote crypto endpt.: 173.11.91.117

path mtu 1500, ipsec overhead 74, media mtu 1500
current outbound spi: 07394B6B
current inbound spi : 226F3E4E

inbound esp sas:
spi: 0x226F3E4E (577715790)
transform: esp-aes-256 esp-sha-hmac no compression
in use settings ={L2L, Tunnel, }
slot: 0, conn_id: 187465728, crypto-map: mymap
sa timing: remaining key lifetime (kB/sec): (3914525/18215)
IV size: 16 bytes
replay detection support: Y
Anti replay bitmap:
0xFFFFFFFF 0xFFFFFFFF
outbound esp sas:
spi: 0x07394B6B (121195371)
transform: esp-aes-256 esp-sha-hmac no compression
in use settings ={L2L, Tunnel, }
slot: 0, conn_id: 187465728, crypto-map: mymap
sa timing: remaining key lifetime (kB/sec): (3914172/18215)
IV size: 16 bytes
replay detection support: Y
Anti replay bitmap:
0x00000000 0x00000001

Crypto map tag: mymap, seq num: 90, local addr: 116.246.25.164

access-list AmericanOffice extended permit ip 10.1.1.0 255.255.255.0 10.24.10.0 255.255.255.0
local ident (addr/mask/prot/port): (10.1.1.0/255.255.255.0/0/0)
remote ident (addr/mask/prot/port): (10.24.10.0/255.255.255.0/0/0)
current_peer: 173.11.91.117

#pkts encaps: 7183, #pkts encrypt: 7183, #pkts digest: 7183
#pkts decaps: 7414, #pkts decrypt: 7414, #pkts verify: 7414
#pkts compressed: 0, #pkts decompressed: 0
#pkts not compressed: 7183, #pkts comp failed: 0, #pkts decomp failed: 0
#pre-frag successes: 0, #pre-frag failures: 0, #fragments created: 0
#PMTUs sent: 0, #PMTUs rcvd: 0, #decapsulated frgs needing reassembly: 0
#send errors: 0, #recv errors: 0

local crypto endpt.: 116.246.25.164, remote crypto endpt.: 173.11.91.117

path mtu 1500, ipsec overhead 74, media mtu 1500
current outbound spi: 18829141
current inbound spi : B4F7E3F6

inbound esp sas:
spi: 0xB4F7E3F6 (3036144630)
transform: esp-aes-256 esp-sha-hmac no compression
in use settings ={L2L, Tunnel, }
slot: 0, conn_id: 187465728, crypto-map: mymap
sa timing: remaining key lifetime (kB/sec): (3914432/4613)
IV size: 16 bytes
replay detection support: Y
Anti replay bitmap:
0xFFFFFFFF 0xFFFFFFFF
outbound esp sas:
spi: 0x18829141 (411210049)
transform: esp-aes-256 esp-sha-hmac no compression
in use settings ={L2L, Tunnel, }
slot: 0, conn_id: 187465728, crypto-map: mymap
sa timing: remaining key lifetime (kB/sec): (3914473/4613)
IV size: 16 bytes
replay detection support: Y
Anti replay bitmap:
0x00000000 0x00000001

Those are the output, many thanks!!

hshzhu101 · ‎01-17-2016

Dear ramyraj2

Do you have any good ideas?

As the vpn tunnel is in using,so I can not do some "big"action

ramyraj2 · ‎01-14-2016

Can you please clear the counters and then take the output once again?

" clear cry ips sa counters"

then " sh cry ips sa peer <address>

hshzhu101 · ‎01-14-2016

thanks for your patient answer,please see as below:

SiteA:

sh crypto ipsec sa peer 101.82.4.236
peer address: 101.82.4.236
Crypto map tag: dyn1, seq num: 65534, local addr: 173.11.91.117

local ident (addr/mask/prot/port): (0.0.0.0/0.0.0.0/0/0)
remote ident (addr/mask/prot/port): (10.1.84.102/255.255.255.255/0/0)
current_peer: 101.82.4.236, username: test
dynamic allocated peer ip: 10.1.84.102

#pkts encaps: 0, #pkts encrypt: 0, #pkts digest: 0
#pkts decaps: 4, #pkts decrypt: 4, #pkts verify: 4
#pkts compressed: 0, #pkts decompressed: 0
#pkts not compressed: 0, #pkts comp failed: 0, #pkts decomp failed: 0
#pre-frag successes: 0, #pre-frag failures: 0, #fragments created: 0
#PMTUs sent: 0, #PMTUs rcvd: 0, #decapsulated frgs needing reassembly: 0
#TFC rcvd: 0, #TFC sent: 0
#Valid ICMP Errors rcvd: 0, #Invalid ICMP Errors rcvd: 0
#send errors: 0, #recv errors: 0

local crypto endpt.: 173.11.91.117/0, remote crypto endpt.: 101.82.4.236/0
path mtu 1500, ipsec overhead 74(44), media mtu 1500
PMTU time remaining (sec): 0, DF policy: copy-df
ICMP error validation: disabled, TFC packets: disabled
current outbound spi: FCCB16DB
current inbound spi : 8D18A6AF

inbound esp sas:
spi: 0x8D18A6AF (2367202991)
transform: esp-aes esp-sha-hmac no compression
in use settings ={RA, Tunnel, IKEv1, }
slot: 0, conn_id: 3928064, crypto-map: dyn1
sa timing: remaining key lifetime (sec): 26968
IV size: 16 bytes
replay detection support: Y
Anti replay bitmap:
0x00000000 0x0007FFFF
outbound esp sas:
spi: 0xFCCB16DB (4241168091)
transform: esp-aes esp-sha-hmac no compression
in use settings ={RA, Tunnel, IKEv1, }
slot: 0, conn_id: 3928064, crypto-map: dyn1
sa timing: remaining key lifetime (sec): 26968
IV size: 16 bytes
replay detection support: Y
Anti replay bitmap:
0x00000000 0x00000001

sh crypto ipsec sa peer 116.246.25.164
peer address: 116.246.25.164
Crypto map tag: Outside1_map, seq num: 1, local addr: 173.11.91.117

access-list Outside1_cryptomap extended permit ip 10.24.10.0 255.255.255.0 10.1.1.0 255.255.255.0
local ident (addr/mask/prot/port): (10.24.10.0/255.255.255.0/0/0)
remote ident (addr/mask/prot/port): (10.1.1.0/255.255.255.0/0/0)
current_peer: 116.246.25.164

#pkts encaps: 4, #pkts encrypt: 4, #pkts digest: 4
#pkts decaps: 4, #pkts decrypt: 4, #pkts verify: 4
#pkts compressed: 0, #pkts decompressed: 0
#pkts not compressed: 4, #pkts comp failed: 0, #pkts decomp failed: 0
#pre-frag successes: 0, #pre-frag failures: 0, #fragments created: 0
#PMTUs sent: 0, #PMTUs rcvd: 0, #decapsulated frgs needing reassembly: 0
#TFC rcvd: 0, #TFC sent: 0
#Valid ICMP Errors rcvd: 0, #Invalid ICMP Errors rcvd: 0
#send errors: 0, #recv errors: 0

local crypto endpt.: 173.11.91.117/0, remote crypto endpt.: 116.246.25.164/0
path mtu 1500, ipsec overhead 74(44), media mtu 1500
PMTU time remaining (sec): 0, DF policy: copy-df
ICMP error validation: disabled, TFC packets: disabled
current outbound spi: FC6622DB
current inbound spi : 371BA5F3

inbound esp sas:
spi: 0x371BA5F3 (924558835)
transform: esp-aes-256 esp-sha-hmac no compression
in use settings ={L2L, Tunnel, IKEv1, }
slot: 0, conn_id: 3932160, crypto-map: Outside1_map
sa timing: remaining key lifetime (kB/sec): (4373987/27541)
IV size: 16 bytes
replay detection support: Y
Anti replay bitmap:
0xFFFFFFFF 0xFFFFFFFF
outbound esp sas:
spi: 0xFC6622DB (4234552027)
transform: esp-aes-256 esp-sha-hmac no compression
in use settings ={L2L, Tunnel, IKEv1, }
slot: 0, conn_id: 3932160, crypto-map: Outside1_map
sa timing: remaining key lifetime (kB/sec): (4373986/27541)
IV size: 16 bytes
replay detection support: Y
Anti replay bitmap:
0x00000000 0x00000001

Crypto map tag: Outside1_map, seq num: 1, local addr: 173.11.91.117

access-list Outside1_cryptomap extended permit ip 10.24.10.0 255.255.255.0 10.1.0.0 255.255.255.0
local ident (addr/mask/prot/port): (10.24.10.0/255.255.255.0/0/0)
remote ident (addr/mask/prot/port): (10.1.0.0/255.255.255.0/0/0)
current_peer: 116.246.25.164

#pkts encaps: 7, #pkts encrypt: 7, #pkts digest: 7
#pkts decaps: 7, #pkts decrypt: 7, #pkts verify: 7
#pkts compressed: 0, #pkts decompressed: 0
#pkts not compressed: 7, #pkts comp failed: 0, #pkts decomp failed: 0
#pre-frag successes: 0, #pre-frag failures: 0, #fragments created: 0
#PMTUs sent: 0, #PMTUs rcvd: 0, #decapsulated frgs needing reassembly: 0
#TFC rcvd: 0, #TFC sent: 0
#Valid ICMP Errors rcvd: 0, #Invalid ICMP Errors rcvd: 0
#send errors: 0, #recv errors: 0

local crypto endpt.: 173.11.91.117/0, remote crypto endpt.: 116.246.25.164/0
path mtu 1500, ipsec overhead 74(44), media mtu 1500
PMTU time remaining (sec): 0, DF policy: copy-df
ICMP error validation: disabled, TFC packets: disabled
current outbound spi: 47FB3A0B
current inbound spi : 21D8B95B

inbound esp sas:
spi: 0x21D8B95B (567851355)
transform: esp-aes-256 esp-sha-hmac no compression
in use settings ={L2L, Tunnel, IKEv1, }
slot: 0, conn_id: 3932160, crypto-map: Outside1_map
sa timing: remaining key lifetime (kB/sec): (4373842/27541)
IV size: 16 bytes
replay detection support: Y
Anti replay bitmap:
0xFFFFFFFF 0xFFFFFFFF
outbound esp sas:
spi: 0x47FB3A0B (1207646731)
transform: esp-aes-256 esp-sha-hmac no compression
in use settings ={L2L, Tunnel, IKEv1, }
slot: 0, conn_id: 3932160, crypto-map: Outside1_map
sa timing: remaining key lifetime (kB/sec): (4373885/27541)
IV size: 16 bytes
replay detection support: Y
Anti replay bitmap:
0x00000000 0x00000001

Crypto map tag: Outside1_map, seq num: 1, local addr: 173.11.91.117

access-list Outside1_cryptomap extended permit ip 10.24.15.0 255.255.255.0 10.1.0.0 255.255.255.0
local ident (addr/mask/prot/port): (10.24.15.0/255.255.255.0/0/0)
remote ident (addr/mask/prot/port): (10.1.0.0/255.255.255.0/0/0)
current_peer: 116.246.25.164

#pkts encaps: 1921, #pkts encrypt: 1921, #pkts digest: 1921
#pkts decaps: 2926, #pkts decrypt: 2926, #pkts verify: 2926
#pkts compressed: 0, #pkts decompressed: 0
#pkts not compressed: 1921, #pkts comp failed: 0, #pkts decomp failed: 0
#pre-frag successes: 0, #pre-frag failures: 0, #fragments created: 0
#PMTUs sent: 0, #PMTUs rcvd: 0, #decapsulated frgs needing reassembly: 0
#TFC rcvd: 0, #TFC sent: 0
#Valid ICMP Errors rcvd: 0, #Invalid ICMP Errors rcvd: 0
#send errors: 0, #recv errors: 0

local crypto endpt.: 173.11.91.117/0, remote crypto endpt.: 116.246.25.164/0
path mtu 1500, ipsec overhead 74(44), media mtu 1500
PMTU time remaining (sec): 0, DF policy: copy-df
ICMP error validation: disabled, TFC packets: disabled
current outbound spi: 21FAEAB2
current inbound spi : B18EBE29

inbound esp sas:
spi: 0xB18EBE29 (2978922025)
transform: esp-aes-256 esp-sha-hmac no compression
in use settings ={L2L, Tunnel, IKEv1, }
slot: 0, conn_id: 3932160, crypto-map: Outside1_map
sa timing: remaining key lifetime (kB/sec): (4293640/27540)
IV size: 16 bytes
replay detection support: Y
Anti replay bitmap:
0xFFFFFFFF 0xFFFFFFFF
outbound esp sas:
spi: 0x21FAEAB2 (570092210)
transform: esp-aes-256 esp-sha-hmac no compression
in use settings ={L2L, Tunnel, IKEv1, }
slot: 0, conn_id: 3932160, crypto-map: Outside1_map
sa timing: remaining key lifetime (kB/sec): (4371464/27540)
IV size: 16 bytes
replay detection support: Y
Anti replay bitmap:
0x00000000 0x00000001

Crypto map tag: Outside1_map, seq num: 1, local addr: 173.11.91.117

access-list Outside1_cryptomap extended permit ip 10.24.15.0 255.255.255.0 10.1.1.0 255.255.255.0
local ident (addr/mask/prot/port): (10.24.15.0/255.255.255.0/0/0)
remote ident (addr/mask/prot/port): (10.1.1.0/255.255.255.0/0/0)
current_peer: 116.246.25.164

#pkts encaps: 0, #pkts encrypt: 0, #pkts digest: 0
#pkts decaps: 0, #pkts decrypt: 0, #pkts verify: 0
#pkts compressed: 0, #pkts decompressed: 0
#pkts not compressed: 0, #pkts comp failed: 0, #pkts decomp failed: 0
#pre-frag successes: 0, #pre-frag failures: 0, #fragments created: 0
#PMTUs sent: 0, #PMTUs rcvd: 0, #decapsulated frgs needing reassembly: 0
#TFC rcvd: 0, #TFC sent: 0
#Valid ICMP Errors rcvd: 0, #Invalid ICMP Errors rcvd: 0
#send errors: 0, #recv errors: 0

local crypto endpt.: 173.11.91.117/0, remote crypto endpt.: 116.246.25.164/0
path mtu 1500, ipsec overhead 74(44), media mtu 1500
PMTU time remaining (sec): 0, DF policy: copy-df
ICMP error validation: disabled, TFC packets: disabled
current outbound spi: F30019BD
current inbound spi : 5E001018

inbound esp sas:
spi: 0x5E001018 (1577062424)
transform: esp-aes-256 esp-sha-hmac no compression
in use settings ={L2L, Tunnel, IKEv1, }
slot: 0, conn_id: 3932160, crypto-map: Outside1_map
sa timing: remaining key lifetime (kB/sec): (4373871/27540)
IV size: 16 bytes
replay detection support: Y
Anti replay bitmap:
0xFFFFFFFF 0xFFFFFFFF
outbound esp sas:
spi: 0xF30019BD (4076870077)
transform: esp-aes-256 esp-sha-hmac no compression
in use settings ={L2L, Tunnel, IKEv1, }
slot: 0, conn_id: 3932160, crypto-map: Outside1_map
sa timing: remaining key lifetime (kB/sec): (4373940/27539)
IV size: 16 bytes
replay detection support: Y
Anti replay bitmap:
0x00000000 0x00000001

Crypto map tag: Outside1_map, seq num: 1, local addr: 173.11.91.117

access-list Outside1_cryptomap extended permit ip 10.24.24.0 255.255.255.0 10.1.1.0 255.255.255.0
local ident (addr/mask/prot/port): (10.24.24.0/255.255.255.0/0/0)
remote ident (addr/mask/prot/port): (10.1.1.0/255.255.255.0/0/0)
current_peer: 116.246.25.164

#pkts encaps: 10, #pkts encrypt: 10, #pkts digest: 10
#pkts decaps: 10, #pkts decrypt: 10, #pkts verify: 10
#pkts compressed: 0, #pkts decompressed: 0
#pkts not compressed: 10, #pkts comp failed: 0, #pkts decomp failed: 0
#pre-frag successes: 0, #pre-frag failures: 0, #fragments created: 0
#PMTUs sent: 0, #PMTUs rcvd: 0, #decapsulated frgs needing reassembly: 0
#TFC rcvd: 0, #TFC sent: 0
#Valid ICMP Errors rcvd: 0, #Invalid ICMP Errors rcvd: 0
#send errors: 0, #recv errors: 0

local crypto endpt.: 173.11.91.117/0, remote crypto endpt.: 116.246.25.164/0
path mtu 1500, ipsec overhead 74(44), media mtu 1500
PMTU time remaining (sec): 0, DF policy: copy-df
ICMP error validation: disabled, TFC packets: disabled
current outbound spi: A8EB7FED
current inbound spi : E0D1D4B5

inbound esp sas:
spi: 0xE0D1D4B5 (3771847861)
transform: esp-aes-256 esp-sha-hmac no compression
in use settings ={L2L, Tunnel, IKEv1, }
slot: 0, conn_id: 3932160, crypto-map: Outside1_map
sa timing: remaining key lifetime (kB/sec): (4373986/27922)
IV size: 16 bytes
replay detection support: Y
Anti replay bitmap:
0x03FFFFFF 0xFFFFFFFF
outbound esp sas:
spi: 0xA8EB7FED (2834005997)
transform: esp-aes-256 esp-sha-hmac no compression
in use settings ={L2L, Tunnel, IKEv1, }
slot: 0, conn_id: 3932160, crypto-map: Outside1_map
sa timing: remaining key lifetime (kB/sec): (4373985/27922)
IV size: 16 bytes
replay detection support: Y
Anti replay bitmap:
0x00000000 0x00000001

Crypto map tag: Outside1_map, seq num: 1, local addr: 173.11.91.117

access-list Outside1_cryptomap extended permit ip 10.24.24.0 255.255.255.0 10.1.0.0 255.255.255.0
local ident (addr/mask/prot/port): (10.24.24.0/255.255.255.0/0/0)
remote ident (addr/mask/prot/port): (10.1.0.0/255.255.255.0/0/0)
current_peer: 116.246.25.164

#pkts encaps: 4, #pkts encrypt: 4, #pkts digest: 4
#pkts decaps: 4, #pkts decrypt: 4, #pkts verify: 4
#pkts compressed: 0, #pkts decompressed: 0
#pkts not compressed: 4, #pkts comp failed: 0, #pkts decomp failed: 0
#pre-frag successes: 0, #pre-frag failures: 0, #fragments created: 0
#PMTUs sent: 0, #PMTUs rcvd: 0, #decapsulated frgs needing reassembly: 0
#TFC rcvd: 0, #TFC sent: 0
#Valid ICMP Errors rcvd: 0, #Invalid ICMP Errors rcvd: 0
#send errors: 0, #recv errors: 0

local crypto endpt.: 173.11.91.117/0, remote crypto endpt.: 116.246.25.164/0
path mtu 1500, ipsec overhead 74(44), media mtu 1500
PMTU time remaining (sec): 0, DF policy: copy-df
ICMP error validation: disabled, TFC packets: disabled
current outbound spi: 6E16DE9C
current inbound spi : C82737B1

inbound esp sas:
spi: 0xC82737B1 (3358013361)
transform: esp-aes-256 esp-sha-hmac no compression
in use settings ={L2L, Tunnel, IKEv1, }
slot: 0, conn_id: 3932160, crypto-map: Outside1_map
sa timing: remaining key lifetime (kB/sec): (4373999/28690)
IV size: 16 bytes
replay detection support: Y
Anti replay bitmap:
0x00000000 0x000007FF
outbound esp sas:
spi: 0x6E16DE9C (1846992540)
transform: esp-aes-256 esp-sha-hmac no compression
in use settings ={L2L, Tunnel, IKEv1, }
slot: 0, conn_id: 3932160, crypto-map: Outside1_map
sa timing: remaining key lifetime (kB/sec): (4373999/28690)
IV size: 16 bytes
replay detection support: Y
Anti replay bitmap:
0x00000000 0x00000001

SiteB:

sh crypto ipsec sa peer 173.11.91.117
peer address: 173.11.91.117
Crypto map tag: mymap, seq num: 90, local addr: 116.246.25.164

access-list AmericanOffice extended permit ip 10.1.0.0 255.255.255.0 10.24.15.0 255.255.255.0
local ident (addr/mask/prot/port): (10.1.0.0/255.255.255.0/0/0)
remote ident (addr/mask/prot/port): (10.24.15.0/255.255.255.0/0/0)
current_peer: 173.11.91.117

#pkts encaps: 4742, #pkts encrypt: 4742, #pkts digest: 4742
#pkts decaps: 3108, #pkts decrypt: 3108, #pkts verify: 3108
#pkts compressed: 0, #pkts decompressed: 0
#pkts not compressed: 4742, #pkts comp failed: 0, #pkts decomp failed: 0
#pre-frag successes: 0, #pre-frag failures: 0, #fragments created: 0
#PMTUs sent: 0, #PMTUs rcvd: 0, #decapsulated frgs needing reassembly: 0
#send errors: 0, #recv errors: 0

local crypto endpt.: 116.246.25.164, remote crypto endpt.: 173.11.91.117

path mtu 1500, ipsec overhead 74, media mtu 1500
current outbound spi: B18EBE29
current inbound spi : 21FAEAB2

inbound esp sas:
spi: 0x21FAEAB2 (570092210)
transform: esp-aes-256 esp-sha-hmac no compression
in use settings ={L2L, Tunnel, }
slot: 0, conn_id: 187564032, crypto-map: mymap
sa timing: remaining key lifetime (kB/sec): (3912422/27490)
IV size: 16 bytes
replay detection support: Y
Anti replay bitmap:
0xFFFFFFFF 0xFFFFFFFF
outbound esp sas:
spi: 0xB18EBE29 (2978922025)
transform: esp-aes-256 esp-sha-hmac no compression
in use settings ={L2L, Tunnel, }
slot: 0, conn_id: 187564032, crypto-map: mymap
sa timing: remaining key lifetime (kB/sec): (3832520/27490)
IV size: 16 bytes
replay detection support: Y
Anti replay bitmap:
0x00000000 0x00000001

Crypto map tag: mymap, seq num: 90, local addr: 116.246.25.164

access-list AmericanOffice extended permit ip 10.1.0.0 255.255.255.0 10.24.24.0 255.255.255.0
local ident (addr/mask/prot/port): (10.1.0.0/255.255.255.0/0/0)
remote ident (addr/mask/prot/port): (10.24.24.0/255.255.255.0/0/0)
current_peer: 173.11.91.117

#pkts encaps: 4, #pkts encrypt: 4, #pkts digest: 4
#pkts decaps: 4, #pkts decrypt: 4, #pkts verify: 4
#pkts compressed: 0, #pkts decompressed: 0
#pkts not compressed: 4, #pkts comp failed: 0, #pkts decomp failed: 0
#pre-frag successes: 0, #pre-frag failures: 0, #fragments created: 0
#PMTUs sent: 0, #PMTUs rcvd: 0, #decapsulated frgs needing reassembly: 0
#send errors: 0, #recv errors: 0

local crypto endpt.: 116.246.25.164, remote crypto endpt.: 173.11.91.117

path mtu 1500, ipsec overhead 74, media mtu 1500
current outbound spi: C82737B1
current inbound spi : 6E16DE9C

inbound esp sas:
spi: 0x6E16DE9C (1846992540)
transform: esp-aes-256 esp-sha-hmac no compression
in use settings ={L2L, Tunnel, }
slot: 0, conn_id: 187564032, crypto-map: mymap
sa timing: remaining key lifetime (kB/sec): (3914999/28641)
IV size: 16 bytes
replay detection support: Y
Anti replay bitmap:
0x00000000 0x000007FF
outbound esp sas:
spi: 0xC82737B1 (3358013361)
transform: esp-aes-256 esp-sha-hmac no compression
in use settings ={L2L, Tunnel, }
slot: 0, conn_id: 187564032, crypto-map: mymap
sa timing: remaining key lifetime (kB/sec): (3914999/28641)
IV size: 16 bytes
replay detection support: Y
Anti replay bitmap:
0x00000000 0x00000001

Crypto map tag: mymap, seq num: 90, local addr: 116.246.25.164

access-list AmericanOffice extended permit ip 10.1.0.0 255.255.255.0 10.24.10.0 255.255.255.0
local ident (addr/mask/prot/port): (10.1.0.0/255.255.255.0/0/0)
remote ident (addr/mask/prot/port): (10.24.10.0/255.255.255.0/0/0)
current_peer: 173.11.91.117

#pkts encaps: 14, #pkts encrypt: 14, #pkts digest: 14
#pkts decaps: 13, #pkts decrypt: 13, #pkts verify: 13
#pkts compressed: 0, #pkts decompressed: 0
#pkts not compressed: 15, #pkts comp failed: 0, #pkts decomp failed: 0
#pre-frag successes: 0, #pre-frag failures: 0, #fragments created: 0
#PMTUs sent: 0, #PMTUs rcvd: 0, #decapsulated frgs needing reassembly: 0
#send errors: 0, #recv errors: 0

local crypto endpt.: 116.246.25.164, remote crypto endpt.: 173.11.91.117

path mtu 1500, ipsec overhead 74, media mtu 1500
current outbound spi: 21D8B95B
current inbound spi : 47FB3A0B

inbound esp sas:
spi: 0x47FB3A0B (1207646731)
transform: esp-aes-256 esp-sha-hmac no compression
in use settings ={L2L, Tunnel, }
slot: 0, conn_id: 187564032, crypto-map: mymap
sa timing: remaining key lifetime (kB/sec): (3914885/27491)
IV size: 16 bytes
replay detection support: Y
Anti replay bitmap:
0xFFFFFFFF 0xFFFFFFFF
outbound esp sas:
spi: 0x21D8B95B (567851355)
transform: esp-aes-256 esp-sha-hmac no compression
in use settings ={L2L, Tunnel, }
slot: 0, conn_id: 187564032, crypto-map: mymap
sa timing: remaining key lifetime (kB/sec): (3914841/27491)
IV size: 16 bytes
replay detection support: Y
Anti replay bitmap:
0x00000000 0x00000001

Crypto map tag: mymap, seq num: 90, local addr: 116.246.25.164

access-list AmericanOffice extended permit ip 10.1.1.0 255.255.255.0 10.24.10.0 255.255.255.0
local ident (addr/mask/prot/port): (10.1.1.0/255.255.255.0/0/0)
remote ident (addr/mask/prot/port): (10.24.10.0/255.255.255.0/0/0)
current_peer: 173.11.91.117

#pkts encaps: 25, #pkts encrypt: 25, #pkts digest: 25
#pkts decaps: 29, #pkts decrypt: 29, #pkts verify: 29
#pkts compressed: 0, #pkts decompressed: 0
#pkts not compressed: 25, #pkts comp failed: 0, #pkts decomp failed: 0
#pre-frag successes: 0, #pre-frag failures: 0, #fragments created: 0
#PMTUs sent: 0, #PMTUs rcvd: 0, #decapsulated frgs needing reassembly: 0
#send errors: 0, #recv errors: 0

local crypto endpt.: 116.246.25.164, remote crypto endpt.: 173.11.91.117

path mtu 1500, ipsec overhead 74, media mtu 1500
current outbound spi: 371BA5F3
current inbound spi : FC6622DB

inbound esp sas:
spi: 0xFC6622DB (4234552027)
transform: esp-aes-256 esp-sha-hmac no compression
in use settings ={L2L, Tunnel, }
slot: 0, conn_id: 187564032, crypto-map: mymap
sa timing: remaining key lifetime (kB/sec): (3914982/27489)
IV size: 16 bytes
replay detection support: Y
Anti replay bitmap:
0xFFFFFFFF 0xFFFFFFFF
outbound esp sas:
spi: 0x371BA5F3 (924558835)
transform: esp-aes-256 esp-sha-hmac no compression
in use settings ={L2L, Tunnel, }
slot: 0, conn_id: 187564032, crypto-map: mymap
sa timing: remaining key lifetime (kB/sec): (3914984/27489)
IV size: 16 bytes
replay detection support: Y
Anti replay bitmap:
0x00000000 0x00000001

Crypto map tag: mymap, seq num: 90, local addr: 116.246.25.164

access-list AmericanOffice extended permit ip 10.1.1.0 255.255.255.0 10.24.24.0 255.255.255.0
local ident (addr/mask/prot/port): (10.1.1.0/255.255.255.0/0/0)
remote ident (addr/mask/prot/port): (10.24.24.0/255.255.255.0/0/0)
current_peer: 173.11.91.117

#pkts encaps: 51, #pkts encrypt: 51, #pkts digest: 51
#pkts decaps: 51, #pkts decrypt: 51, #pkts verify: 51
#pkts compressed: 0, #pkts decompressed: 0
#pkts not compressed: 51, #pkts comp failed: 0, #pkts decomp failed: 0
#pre-frag successes: 0, #pre-frag failures: 0, #fragments created: 0
#PMTUs sent: 0, #PMTUs rcvd: 0, #decapsulated frgs needing reassembly: 0
#send errors: 0, #recv errors: 0

local crypto endpt.: 116.246.25.164, remote crypto endpt.: 173.11.91.117

path mtu 1500, ipsec overhead 74, media mtu 1500
current outbound spi: E0D1D4B5
current inbound spi : A8EB7FED

inbound esp sas:
spi: 0xA8EB7FED (2834005997)
transform: esp-aes-256 esp-sha-hmac no compression
in use settings ={L2L, Tunnel, }
slot: 0, conn_id: 187564032, crypto-map: mymap
sa timing: remaining key lifetime (kB/sec): (3914973/27870)
IV size: 16 bytes
replay detection support: Y
Anti replay bitmap:
0xFFFFFFFF 0xFFFFFFFF
outbound esp sas:
spi: 0xE0D1D4B5 (3771847861)
transform: esp-aes-256 esp-sha-hmac no compression
in use settings ={L2L, Tunnel, }
slot: 0, conn_id: 187564032, crypto-map: mymap
sa timing: remaining key lifetime (kB/sec): (3914975/27870)
IV size: 16 bytes
replay detection support: Y
Anti replay bitmap:
0x00000000 0x00000001

Crypto map tag: mymap, seq num: 90, local addr: 116.246.25.164

access-list AmericanOffice extended permit ip 10.1.1.0 255.255.255.0 10.24.15.0 255.255.255.0
local ident (addr/mask/prot/port): (10.1.1.0/255.255.255.0/0/0)
remote ident (addr/mask/prot/port): (10.24.15.0/255.255.255.0/0/0)
current_peer: 173.11.91.117

#pkts encaps: 10, #pkts encrypt: 10, #pkts digest: 10
#pkts decaps: 13, #pkts decrypt: 13, #pkts verify: 13
#pkts compressed: 0, #pkts decompressed: 0
#pkts not compressed: 10, #pkts comp failed: 0, #pkts decomp failed: 0
#pre-frag successes: 0, #pre-frag failures: 0, #fragments created: 0
#PMTUs sent: 0, #PMTUs rcvd: 0, #decapsulated frgs needing reassembly: 0
#send errors: 0, #recv errors: 0

local crypto endpt.: 116.246.25.164, remote crypto endpt.: 173.11.91.117

path mtu 1500, ipsec overhead 74, media mtu 1500
current outbound spi: 5E001018
current inbound spi : F30019BD

inbound esp sas:
spi: 0xF30019BD (4076870077)
transform: esp-aes-256 esp-sha-hmac no compression
in use settings ={L2L, Tunnel, }
slot: 0, conn_id: 187564032, crypto-map: mymap
sa timing: remaining key lifetime (kB/sec): (3914936/27487)
IV size: 16 bytes
replay detection support: Y
Anti replay bitmap:
0xFFFFFFFF 0xFFFFFFFF
outbound esp sas:
spi: 0x5E001018 (1577062424)
transform: esp-aes-256 esp-sha-hmac no compression
in use settings ={L2L, Tunnel, }
slot: 0, conn_id: 187564032, crypto-map: mymap
sa timing: remaining key lifetime (kB/sec): (3914869/27487)
IV size: 16 bytes
replay detection support: Y
Anti replay bitmap:
0x00000000 0x00000001

hshzhu101 · ‎01-14-2016

Dear ramyraj2

this is the debug information that I ping from remote vpn client to the Server of SiteB,the ping test is unsuccessful.But ,the debug information is strange,I think.

debug crypto ipsec 255
CP-US-SF-FW1# IPSEC(crypto_map_check)-3: Looking for crypto map matching 5-tuple: Prot=1, saddr=10.1.84.102, sport=256, daddr=10.1.0.195, dport=256
IPSEC(crypto_map_check)-3: Checking crypto map Outside1_map 1: matched.
IPSEC(crypto_map_check)-3: Looking for crypto map matching 5-tuple: Prot=1, saddr=10.1.84.102, sport=256, daddr=10.1.0.195, dport=256
IPSEC(crypto_map_check)-3: Checking crypto map Outside1_map 1: matched.
IPSEC: Received a PFKey message from IKE
IPSEC: Parsing PFKey GETSPI message
IPSEC: Creating IPsec SA
IPSEC: Getting the inbound SPI
IPSEC: New embryonic SA created @ 0x00007fff392cb1e0,
SCB: 0x39398810,
Direction: inbound
SPI : 0xC3252B50
Session ID: 0x003C0000
VPIF num : 0x00000002
Tunnel type: l2l
Protocol : esp
Lifetime : 240 seconds
IPSEC(crypto_map_check)-3: Looking for crypto map matching 5-tuple: Prot=1, saddr=10.1.84.102, sport=256, daddr=10.1.0.195, dport=256
IPSEC(crypto_map_check)-3: Checking crypto map Outside1_map 1: matched.
IPSEC(crypto_map_check)-3: Looking for crypto map matching 5-tuple: Prot=1, saddr=10.1.84.102, sport=256, daddr=10.1.0.195, dport=256
IPSEC(crypto_map_check)-3: Checking crypto map Outside1_map 1: matched.
IPSEC(crypto_map_check)-3: Looking for crypto map matching 5-tuple: Prot=1, saddr=10.1.84.102, sport=256, daddr=10.1.0.195, dport=256
IPSEC(crypto_map_check)-3: Checking crypto map Outside1_map 1: matched.

CP-US-SF-FW1# IPSEC: Received a PFKey message from IKE
IPSEC: Destroy current inbound SPI: 0xC3252B50

hshzhu101 · ‎01-28-2016

Greetings people,

have any good idea?

hshzhu101 · ‎01-28-2016

Below is the packet-tracer input:

SiteA:

packet-tracer input outside1 icmp 10.1.84.103 8 0 10.1.0.195

Phase: 1
Type: ROUTE-LOOKUP
Subtype: input
Result: ALLOW
Config:
Additional Information:
in 0.0.0.0 0.0.0.0 Outside1

Phase: 2
Type: ACCESS-LIST
Subtype: log
Result: ALLOW
Config:
access-group global_access global
access-list global_access extended permit icmp any4 any4
Additional Information:

Phase: 3
Type: NAT
Subtype:
Result: ALLOW
Config:
nat (Outside1,Outside1) source static Remote_admin Remote_admin destination static ChinaSubnets ChinaSubnets no-proxy-arp route-lookup
Additional Information:
Static translate 10.1.84.103/0 to 10.1.84.103/0

Phase: 4
Type: NAT
Subtype: per-session
Result: ALLOW
Config:
Additional Information:

Phase: 5
Type: IP-OPTIONS
Subtype:
Result: ALLOW
Config:
Additional Information:

Phase: 6
Type: CP-PUNT
Subtype:
Result: ALLOW
Config:
Additional Information:

Phase: 7
Type: VPN
Subtype: ipsec-tunnel-flow
Result: DROP
Config:
Additional Information:

Result:
input-interface: Outside1
input-status: up
input-line-status: up
output-interface: Outside1
output-status: up
output-line-status: up
Action: drop
Drop-reason: (acl-drop) Flow is denied by configured rule

SiteB:

packet-tracer input inside icmp 10.1.0.195 8 0 10.1.84.103

Phase: 1
Type: FLOW-LOOKUP
Subtype:
Result: ALLOW
Config:
Additional Information:
Found no matching flow, creating a new flow

Phase: 2
Type: ROUTE-LOOKUP
Subtype: input
Result: ALLOW
Config:
Additional Information:
in 10.1.84.0 255.255.255.0 Outside

Phase: 3
Type: IP-OPTIONS
Subtype:
Result: ALLOW
Config:
Additional Information:

Phase: 4
Type: INSPECT
Subtype: np-inspect
Result: ALLOW
Config:
class-map inspection_default
match default-inspection-traffic
policy-map global_policy
class inspection_default
inspect icmp
service-policy global_policy global
Additional Information:

Phase: 5
Type: INSPECT
Subtype: np-inspect
Result: ALLOW
Config:
Additional Information:

Phase: 6
Type: NAT-EXEMPT
Subtype:
Result: ALLOW
Config:
nat-control
match ip Inside 10.1.0.0 255.255.255.0 Outside 10.1.84.0 255.255.255.0
NAT exempt
translate_hits = 24, untranslate_hits = 241
Additional Information:

Phase: 7
Type: NAT
Subtype:
Result: ALLOW
Config:
nat (Inside) 1 10.1.0.0 255.255.255.0
nat-control
match ip Inside 10.1.0.0 255.255.255.0 Outside any
dynamic translation to pool 1 (X.X.X.X [Interface PAT])
translate_hits = 15853269, untranslate_hits = 1369754
Additional Information:

Phase: 8
Type: NAT
Subtype: host-limits
Result: ALLOW
Config:
nat (Inside) 1 10.1.0.0 255.255.255.0
nat-control
match ip Inside 10.1.0.0 255.255.255.0 Outside any
dynamic translation to pool 1 (X.X.X.X [Interface PAT])
translate_hits = 15853269, untranslate_hits = 1369754
Additional Information:

Phase: 9
Type: VPN
Subtype: encrypt
Result: ALLOW
Config:
Additional Information:

Phase: 10
Type: VPN
Subtype: ipsec-tunnel-flow
Result: ALLOW
Config:
Additional Information:

Phase: 11
Type: IP-OPTIONS
Subtype:
Result: ALLOW
Config:
Additional Information:

Phase: 12
Type: FLOW-CREATION
Subtype:
Result: ALLOW
Config:
Additional Information:
New flow created with id 1817081832, packet dispatched to next module

Result:
input-interface: Inside
input-status: up
input-line-status: up
output-interface: Outside
output-status: up
output-line-status: up
Action: allow

10.1.84.103 is the remote vpn client ip,and 10.1.0.195 is the ip of site B.