Table B-6 lists all the severity level 6 logging messages, along with their message numbers and text. All the messages supported by PIX OS releases 6.3 and 7.0, as well as FWSM 2.3, are shown.
Table B-6. Severity 6 (Informational) Logging Messages
Level and Message Number | Message Text |
|---|
%PIX-6-103012 | Unknown message text. (7.0) |
%PIX-6-106012 | Deny IP from IP_address to IP_address, IP options hex. (7.0) |
%PIX-6-106015 | Deny TCP (no connection) from IP_address/port to IP_address/port flags tcp_flags on interface interface_name. |
%PIX-6-106025 | Failed to determine the security context for the packet:sourceVlan:sourceIP destIP sourcePort destPort protocol. (7.0) |
%PIX-6-106026 | Failed to determine the security context for the packet:sourceVlan:sourceIP destIP sourcePort destPort protocol. (7.0) |
%PIX-6-106100 | (PIX 6.3) access-list acl_ID {permitted | denied | est-allowed} protocol interface_name/source_address(source_port) -> interface_name/dest_address(dest_port) hit-cnt number ({first hit | number-second interval}). |
%PIX-6-106102 | access-list id action url url hit-cnt hits. (7.0) |
%PIX-6-106103 | access-list id action tcp interface ip-addr port interface ip-addr port hit-cnt hits. (7.0) |
%PIX-6-109001 | Auth start for user user from inside_address/inside_port to outside_address/outside_port. |
%PIX-6-109002 | Auth from inside_address/inside_port to outside_address/outside_port failed (server IP_address failed) on interface interface_name. |
%PIX-6-109003 | Auth from inside_address to outside_address/outside_port failed (all servers failed) on interface interface_name. |
%PIX-6-109005 | Authentication succeeded for user user from inside_address/inside_port to outside_address/outside_port on interface interface_name. |
%PIX-6-109006 | Authentication failed for user user from inside_address/inside_port to outside_address/outside_port on interface interface_name. |
%PIX-6-109007 | Authorization permitted for user user from inside_address/inside_port to outside_address/outside_port on interface interface_name. |
%PIX-6-109008 | Authorization denied for user user from source_address/source_port to destination_address/destination_port on interface interface_name. |
%PIX-6-109009 | Authorization denied from inside_address/inside_port to outside_address/outside_port (not authenticated) on interface interface_name. |
%PIX-6-109015 | Authorization denied (acl=acl_ID) for user 'user' from source_address/source_port to dest_address/dest_port on interface interface_name. |
%PIX-6-109024 | Authorization denied from source_IP_address/src_port to dest_IP_address/dest_port (not authenticated) on interface interface_name using protocol. (7.0) |
%PIX-6-109025 | Authorization denied (acl=acl_ID) for user 'user' from source_address/source_port to dest_address/dest_port on interface interface_name using protocol. (7.0) |
%PIX-6-110001 | No route to dest_address from source_address. |
%PIX-6-113002 | Unknown message text. (7.0) |
%PIX-6-113003 | AAA group policy for user username is being set to policy_name. (7.0) |
%PIX-6-113004 | AAA user aaa_type Successful : server = server_IP_address, User = username. (7.0) |
%PIX-6-113005 | AAA user authentication Rejected : reason = reason : server = server_IP_address, User = username. (7.0) |
%PIX-6-113006 | User user_name locked out on exceeding number successive failed authentication attempts. (7.0) |
%PIX-6-113007 | User user_name unlocked by administrator. (7.0) |
%PIX-6-199002 | PIX startup completed. Beginning operation. |
%PIX-6-199003 | Reducing link MTU dec. (7.0) |
%PIX-6-199005 | PIX Startup begin. |
%PIX-6-201010 | Embryonic connection limit exceeded cnt/limit for dir packet from sip/sport to dip/dport on interface if_name. (7.0) |
%PIX-6-210022 | LU missed number updates. |
%PIX-6-302003 | Built H245 connection for foreign_address outside_address/outside_port local_address inside_address/inside_port. |
%PIX-6-302004 | Pre-allocate H323 UDP backconnection for foreign_address outside_address/outside_port to local_address inside_address/inside_port. |
%PIX-6-302009 | Rebuilt TCP connection number for foreign_address outside_address/outside_port global_address global_address/global_port local_address inside_address/inside_port. |
%PIX-6-302010 | Connections in use, connections most used. |
%PIX-6-302012 | Pre-allocate H225 Call Signalling Connection for faddr ip address/port to laddr ip address. (7.0) |
%PIX-6-302013 | Built {inbound | outbound} TCP connection number for interface_name:real_address/real_port (mapped_address/mapped_port) to interface_name:real_address/real_port (mapped_address/mapped_port) [(user)]. |
%PIX-6-302014 | Teardown TCP connection number for interface_name:real_address/real_port to interface_name:real_address/real_port duration time bytes number [reason] [(user)]. |
%PIX-6-302015 | Built {inbound | outbound} UDP connection number for interface_name:real_address/real_port (mapped_address/mapped_port) to interface_name:real_address/real_port (mapped_address/mapped_port) [(user)]. |
%PIX-6-302016 | Teardown UDP connection number for interface_name:real_address/real_port to interface_name:real_address/real_port duration time bytes number [(user)]. |
%PIX-6-302017 | Built {inbound | outbound} GRE connection id from interface:real_address (translated_address) to interface:real_address/real_cid (translated_address/translated_cid)[(user). (7.0) |
%PIX-6-302018 | Teardown GRE connection id from interface:real_address (translated_address) to interface:real_address/real_cid (translated_address/translated_cid) duration hh:mm:ss bytes bytes [(user)]. (7.0) |
%PIX-6-302020 | Built {inbound | outbound} ICMP connection for faddr {faddr | icmp_seq_num} gaddr {gaddr | cmp_type} laddr laddr. (7.0) |
%PIX-6-302021 | Teardown ICMP connection for faddr {faddr | icmp_seq_num} gaddr {gaddr | cmp_type} laddr laddr. (7.0) |
%PIX-6-303002 | source_address {Stored | Retrieved} dest_address: mapped_address. |
%PIX-6-303003 | FTP cmd_name command denied, terminating connection from src_if:src_ip/src_port to dest_if:dest_ip/dest_port. (7.0) |
%PIX-6-304004 | URL Server IP_address request failed URL url. |
%PIX-6-305007 | addrpool_free(): Orphan IP IP_address on interface interface_number. |
%PIX-6-305009 | Built {dynamic | static} translation from interface_name [(acl-name)]:real_address to interface_name:mapped_address. |
%PIX-6-305010 | Teardown {dynamic | static} translation from interface_name [(acl-name)]:real_address to interface_name:mapped_address duration time. |
%PIX-6-305011 | Built {dynamic | static} {TCP | UDP | ICMP} translation from interface_name [(acl-name)]:real_address/real_port to interface_name:mapped_address/mapped_port. |
%PIX-6-305012 | Teardown {dynamic | static} {TCP | UDP | ICMP} translation from interface_name [(acl-name)]:real_address/{real_port | real_ICMP_ID} to interface_name:mapped_address/{mapped_port | mapped_ICMP_ID} duration time. (7.0) |
%FWSM-6-307001 | Denied Telnet login session from IP_address on interface interface_name. |
%FWSM-6-307002 | Permitted Telnet login session from IP_addr. |
%FWSM-6-307003 | Telnet login session failed from IP_address (num attempts) on interface interface_name. |
%PIX-6-308001 | PIX console enable password incorrect for number tries (from IP_address). |
%PIX-6-309002 | Permitted manager connection from IP_address. |
%PIX-6-311001 | LU loading standby start. |
%PIX-6-311002 | LU loading standby end. |
%PIX-6-311003 | LU recv thread up. |
%PIX-6-311004 | LU xmit thread up. |
%PIX-6-312001 | RIP hdr failed from IP_address: cmd=string, version=number domain=string on interface interface_name. |
%PIX-6-314001 | Pre-allocate RTSP UDP backconnection for foreign_address outside_address/outside_port to local_address inside_address/inside_port. |
%FWSM-6-315002 | Permitted SSH session from IP_address on interface interface_name for user "user_id". |
%FWSM-6-315003 | SSH login session failed from IP_address on (num attempts) on interface interface_name by user "user_id". |
%PIX-6-315011 | SSH session from IP_address on interface interface_name for user user disconnected by SSH server, reason: reason. |
%PIX-6-321003 | Resource var1 log level of var2 reached. (7.0) |
%PIX-6-321004 | Resource var1 rate log level of var2 reached. (7.0) |
%PIX-6-403500 | PPPoEService name 'any' not received in PADO. Intf:interface_name AC:ac_name. |
%PIX-6-602101 | PMTU-D packet number bytes greater than effective mtu number dest_addr=dest_address, src_addr=source_address, prot=protocol. |
%PIX-6-602102 | Adjusting IPSec tunnel mtu. |
%PIX-6-602301 | SA created. |
%PIX-6-602302 | Deleting SA. |
%PIX-6-603101 | PPTP received out of seq or duplicate pkt, tnl_id=number, sess_id=number, seq=number. |
%PIX-6-603102 | PPP virtual interface interface_nameuser: user aaa authentication started. |
%PIX-6-603103 | PPP virtual interface interface_nameuser: user aaa authentication status. |
%PIX-6-603104 | PPTP Tunnel created, tunnel_id is number, remote_peer_ip is remote_address, ppp_virtual_interface_id is number, client_dynamic_ip is IP_address, username is user, MPPE_key_strength is string. |
%PIX-6-603105 | PPTP Tunnel deleted, tunnel_id = number, remote_peer_ip= remote_address. |
%PIX-6-603106 | L2TP Tunnel created, tunnel_id is number, remote_peer_ip is remote_address, ppp_virtual_interface_id is number, client_dynamic_ip is IP_address, username is user. |
%PIX-6-603107 | L2TP Tunnel deleted, tunnel_id = number, remote_peer_ip = remote_address. |
%PIX-6-603108 | Built PPTP Tunnel at interface_name, tunnel-id = number, remote-peer = IP_address, virtual-interface = number, client-dynamic-ip = IP_address, username = user, MPPE-key-strength = number. |
%PIX-6-603109 | Teardown PPPOE Tunnel at interface_name, tunnel-id = number, remote-peer = IP_address. |
%PIX-6-604101 | DHCP client interface interface_name: Allocated ip = IP_address, mask = netmask, gw = gateway_address. |
%PIX-6-604102 | DHCP client interface interface_name: address released. |
%PIX-6-604103 | DHCP daemon interface interface_name: address granted MAC_address (IP_address). |
%PIX-6-604104 | DHCP daemon interface interface_name: address released. |
%FWSM-6-605003 | HTTP daemon: Login failed from IP_address for user "user_id". |
%PIX-6-605004 | Login denied from {source_address/source_port | serial} to {interface_name:dest_address/service | console} for user "user". |
%PIX-6-605005 | Login permitted from {source_address/source_port | serial} to {interface_name:dest_address/service | console} for user "user". |
%PIX-6-606001 | PDM session number number from IP_address started. |
%PIX-6-606002 | PDM session number number from IP_address ended. |
%PIX-6-606003 | PDM logging session number id from ip started id session ID assigned (7.0). |
%PIX-6-606004 | PDM logging session number id from ip ended (7.0). |
%PIX-6-607001 | Pre-allocate SIP connection_type secondary channel for interface_name:IP_address/port to interface_name:IP_address from string message. |
%PIX-6-608001 | Pre-allocate Skinny connection_type secondary channel for interface_name:IP_address to interface_name:IP_address/port from string message. |
%PIX-6-609001 | Built local-host interface_name:IP_address. |
%PIX-6-609002 | Teardown local-host interface_name:IP_address duration time. |
%PIX-6-610101 | Authorization failed: Cmd: command Cmdtype: command_modifier. |
%PIX-6-611101 | User authentication succeeded: Uname: user. |
%PIX-6-611102 | User authentication failed: Uname: user. |
%PIX-6-611301 | VPNClient: NAT configured for Client Mode with no split tunneling: NAT addr: mapped_address. |
%PIX-6-611302 | VPNClient: NAT exemption configured for Network Extension Mode with no split tunneling. |
%PIX-6-611303 | VPNClient: NAT configured for Client Mode with split tunneling: NAT addr: mapped_address Split Tunnel Networks: IP_address/netmask IP_address/netmask ... |
%PIX-6-611304 | VPNClient: NAT exemption configured for Network Extension Mode with split tunneling: Split Tunnel Networks: IP_address/netmask IP_address/netmask ... |
%PIX-6-611305 | VPNClient: DHCP Policy installed: Primary DNS: IP_address Secondary DNS: IP_address Primary WINS: IP_address Secondary WINS: IP_address. |
%PIX-6-611306 | VPNClient: Perfect Forward Secrecy Policy installed. |
%PIX-6-611307 | VPNClient: Head end: IP_address. |
%PIX-6-611308 | VPNClient: Split DNS Policy installed: List of domains: string string ... |
%PIX-6-611309 | VPNClient: Disconnecting from head end and uninstalling previously downloaded policy: Head End : IP_address. |
%PIX-6-611310 | VNPClient: XAUTH Succeeded: Peer: IP_address. |
%PIX-6-611311 | VNPClient: XAUTH Failed: Peer: IP_address. |
%PIX-6-611312 | VPNClient: Backup Server List: reason. |
%PIX-6-611314 | VPNClient: Load Balancing Cluster with Virtual IP: IP_address has redirected the PIX to server IP_address. |
%PIX-6-611315 | VPNClient: Disconnecting from Load Balancing Cluster member IP_address. |
%PIX-6-611316 | VPNClient: Secure Unit Authentication Enabled. |
%PIX-6-611317 | VPNClient: Secure Unit Authentication Disabled. |
%PIX-6-611318 | VPNClient: User Authentication Enabled: Auth Server IP: IP_address Auth Server Port: port Idle Timeout: time. |
%PIX-6-611319 | VPNClient: User Authentication Disabled. |
%PIX-6-611320 | VPNClient: Device Pass Thru Enabled. |
%PIX-6-611321 | VPNClient: Device Pass Thru Disabled. |
%PIX-6-611322 | VPNClient: Extended XAUTH conversation initiated when SUA disabled. |
%PIX-6-611323 | VPNClient: Duplicate split nw entry. |
%PIX-6-613001 | Checksum Failure in database in area string Link State Id IP_address Old Checksum number New Checksum number. |
%PIX-6-613002 | interface interface_name has zero bandwidth. |
%PIX-6-613003 | IP_address netmask changed from area string to area string. |
%PIX-6-614001 | Split DNS: request patched from server: IP_address to server: IP_address. |
%PIX-6-614002 | Split DNS: reply from server:IP_address reverse patched back to original server:IP_address. |
%PIX-6-615001 | VLAN number not available for firewall interface. |
%PIX-6-615002 | VLAN number available for firewall interface. |
%PIX-6-616001 | Pre-allocate MGCP data-channel connection for inside_ifc:inside_ip address to outside_ifc:outside_ipaddress/port from message_type message. (7.0) |
%PIX-6-617001 | GTPv version msg_type from src_ifc:src_ip/src_port not accepted by dest_ifc:dest_ip/dest_port. (7.0) |
%PIX-6-617002 | Removing v1 PDP Context with TID tid from GGSN ip_address and SGSN ip_add, Reason: reason or Removing v1 {primary | secondary} PDP Context with TID tid from GGSN ip_address and SGSN ip_add, Reason: reason. (7.0) |
%PIX-6-617003 | GTP Tunnel created from src_ifc:src_ip/src_port to dest_ifc:dest_ip/dest_port. (7.0) |
%PIX-6-617004 | GTP connection created for response from src_ifc:src_ip/0 to dest_ifc:dest_ip/dest_port. (7.0) |
%PIX-6-620001 | Pre-allocate CTIQBE {RTP | RTCP} secondary channel for interface_name:outside_address[/outside_port] to interface_name:inside_address[/inside_port] from CTIQBE_message_name message. |
%PIX-6-621001 | Interface ifname does not support multicast, not enabled. (7.0: PIM) |
%PIX-6-621002 | Interface ifname does not support multicast, not enabled. (7.0: IGMP) |
%PIX-6-621003 | The event queue size has exceeded number. (7.0) |
%PIX-6-621004 | Unknown message text. (7.0) |
%PIX-6-621005 | Unknown message text. (7.0) |
%PIX-6-621006 | Mrib disconnected, (addr,addr) event cancelled. (7.0) |
%PIX-6-621007 | Bad register from ifname:addr to addr for (addr, addr). (7.0) |
%PIX-6-713038 | Unknown message text. (7.0) |
%PIX-6-713145 | Detected Hardware Client in network extension mode, adding static route for address: IP address, mask: network mask. (7.0) |
%PIX-6-713147 | Terminating tunnel to Hardware Client in network extension mode, deleting static route for address: IP address, mask: network mask. (7.0) |
%PIX-6-713172 | Automatic NAT Detection Status: Remote end {is | is not} behind a NAT device This end {is | is not} behind a NAT device. (7.0) |
%PIX-6-713177 | Received remote Proxy Host FQDN in ID Payload: Host Name: host_name Address IP_address, Protocol protocol_value, Port port_number. (7.0) |
%PIX-6-713184 | Client Type: Client_type Client Application Version: Application_version_string. (7.0) |
%PIX-6-713211 | Adding static route for L2L peer coming in on a dynamic map. address: IP address, mask: network mask. (7.0) |
%PIX-6-713213 | Deleting static route for L2L peer that came in on a dynamic map. address: IP address, mask: network mask. (7.0) |
%PIX-6-713215 | No match against Client Type and Version rules. Client: type version is/is not allowed by default. (7.0) |
%PIX-6-713905 | Descriptive_event_string. (7.0) |
%ASA-6-716001 | Group group User user WebVPN session started. (7.0) |
%ASA-6-716002 | Authentication successful, Group group, User user, Session Type type. (7.0) |
%ASA-6-716003 | Group group User user WebVPN session not allowed. WebVPN ACL parse error. (7.0) |
%ASA-6-716004 | Group group User user WebVPN session terminated. User requested. (7.0) |
%ASA-6-716005 | Group name User user WebVPN session terminated. Administrator reset. (7.0) |
%ASA-6-716006 | Group name User user WebVPN session terminated. Idle timeout. (7.0) |
%ASA-6-716009 | Group name User user WebVPN access denied for this URL url. (7.0) |
%ASA-6-716038 | Authentication: successful, group = name user = user, Session Type: WebVPN. (7.0) |
%ASA-6-716039 | Authentication: rejected, group = name user = user, Session Type: WebVPN. (7.0) |
%ASA-6-716040 | Reboot pending, new sessions disabled. Denied user login. (7.0) |
%PIX-6-717003 | Certificate received from Certificate Authority for trustpoint trustpoint_name. (7.0) |
%PIX-6-717004 | PKCS #12 export failed for trustpoint trustpoint_name. (7.0) |
%PIX-6-717005 | PKCS #12 export succeeded for trustpoint trustpoint_name. (7.0) |
%PIX-6-717006 | PKCS #12 import failed for trustpoint trustpoint_name. (7.0) |
%PIX-6-717007 | PKCS #12 import succeeded for trustpoint trustpoint_name. (7.0) |
%PIX-6-718003 | Got unknown peer message message_number from IP_address, local version version_number, remote version version_number. (7.0) |
%PIX-6-718004 | Got unknown internal message message_number. (7.0) |
%PIX-6-718013 | Peer IP_address is not answering HELLO. (7.0) |
%PIX-6-718027 | Received unexpected KEEPALIVE request from IP_address. (7.0) |
%PIX-6-718030 | Received planned OOS from IP_address. (7.0) |
%PIX-6-718037 | Master processed number_of_timeouts timeouts. (7.0) |
%PIX-6-718038 | Slave processed number_of_timeouts timeouts. (7.0) |
%PIX-6-718039 | Process dead peer IP_address. (7.0) |
%PIX-6-718040 | Timed-out exchange ID exchange_ID not found. (7.0) |
%PIX-6-718051 | Deleted secure tunnel to peer IP_address. (7.0) |