Table B-7 lists all the severity level 7 logging messages, along with their message numbers and text. All the messages supported by PIX OS releases 6.3 and 7.0, as well as FWSM 2.3, are shown.
Table B-7. Severity 7 (Debugging) Logging Messages
Level and Message Number | Message Text |
|---|
%PIX-7-106100 | access-list acl_ID {permitted | denied | est-allowed} protocol interface_name/source_address(source_port) -> interface_name/dest_address(dest_port) hit-cnt number ({first hit | number-second interval}). (7.0) |
%PIX-7-109014 | uauth_lookup_net fail for uauth_in(). |
%PIX-7-109021 | Uauth null proxy error. |
%PIX-7-109026 | [aaa protocol] Invalid reply digest received; shared server key may be mismatched. (7.0) |
%PIX-7-111009 | User user executed cmd:string. |
%PIX-7-199907 | IP detected an attached application using port port while removing context. (7.0) |
%PIX-7-199908 | Protocol detected an attached application using local port local_port and destination port dest_port. (7.0) |
%PIX-7-199909 | ICMP detected an attached application while removing a context. (7.0) |
%PIX-7-304005 | URL Server IP_address request pending URL url. |
%PIX-7-304009 | Ran out of buffer blocks specified by url-block command. (7.0) |
%PIX-7-701001 | alloc_user() out of Tcp_user objects. |
%PIX-7-701002 | alloc_user() out of Tcp_proxy objects. (7.0) |
%PIX-7-702301 | Lifetime expiring. |
%PIX-7-702303 | sa_request. |
%PIX-7-703001 | H.225 message received from interface_name:ip_address/port to interface_name:ip_address/port is using an unsupported version number. |
%PIX-7-703002 | Received H.225 Release Complete with newConnectionNeeded for interface_name:ip_address to interface_name:ip_address/port. |
%PIX-7-709001 | FO replication failed: cmd=command returned=code. |
%PIX-7-709002 | FO unreplicable: cmd=command. |
%PIX-7-710001 | TCP access requested from source_address/source_port to interface_name:dest_address/service. |
%PIX-7-710002 | {TCP | UDP} access permitted from source_address/source_port to interface_name:dest_address/service. |
%PIX-7-710004 | TCP connection limit exceeded from source_address/source_port to interface_name:dest_address/service. (7.0) |
%PIX-7-710005 | {TCP | UDP} request discarded from source_address/source_port to interface_name:dest_address/service. |
%PIX-7-710006 | Protocol request discarded from source_address to interface_name:dest_address. |
%PIX-7-711001 | debug_trace_msg. (7.0) |
%PIX-7-711002 | Task ran for elapsed_time msecs, process = process_name. (7.0) |
%PIX-7-712001 | Unknown message text. (7.0) |
%PIX-7-712002 | Unknown message text. (7.0) |
%PIX-7-712003 | Unknown message text. (7.0) |
%PIX-7-713001 | Unknown message text. (7.0) |
%PIX-7-713007 | Unknown message text. (7.0) |
%PIX-7-713023 | Unknown message text. (7.0) |
%PIX-7-713024 | Received local Proxy Host data in ID Payload: Address IP address, Protocol protocol value, Port port number. (7.0) |
%PIX-7-713025 | Received remote Proxy Host data in ID Payload: Address IP address, Protocol protocol value, Port port number. (7.0) |
%PIX-7-713026 | Transmitted local Proxy Host data in ID Payload: Address IP address, Protocol protocol value, Port port number. (7.0) |
%PIX-7-713027 | Transmitted remote Proxy Host data in ID Payload: Address IP address, Protocol protocol value, Port port number. (7.0) |
%PIX-7-713028 | Received local Proxy Range data in ID Payload: Addresses IP address-IP address, Protocol protocol value, Port port number. (7.0) |
%PIX-7-713029 | Received remote Proxy Range data in ID Payload: Addresses IP address-IP address, Protocol protocol value, Port port number. (7.0) |
%PIX-7-713030 | Transmitted local Proxy Range data in ID Payload: Addresses IP address-IP address, Protocol protocol value, Port port number. (7.0) |
%PIX-7-713031 | Transmitted remote Proxy Range data in ID Payload: Addresses IP address-IP address, Protocol protocol value, Port port number. (7.0) |
%PIX-7-713034 | Received local IP Proxy Subnet data in ID Payload: Address IP address, Mask network mask, Protocol protocol value, Port port number. (7.0) |
%PIX-7-713035 | Received remote IP Proxy Subnet data in ID Payload: Address IP address, Mask network mask, Protocol protocol value, Port port number. (7.0) |
%PIX-7-713036 | Transmitted local IP Proxy Subnet data in ID Payload: Address IP address, Mask network mask, Protocol protocol value, Port port. (7.0) |
%PIX-7-713037 | Transmitted remote IP Proxy Subnet data in ID Payload: Address IP address, Mask network mask, Protocol protocol value, Port port. (7.0) |
%PIX-7-713039 | Send failure: Bytes (number of bytes), Peer: IP address. (7.0) |
%PIX-7-713040 | Could not find connection entry and can not encrypt: MsgidID. (7.0) |
%PIX-7-713044 | Unknown message text. (7.0) |
%PIX-7-713052 | User (username) authenticated. (7.0) |
%PIX-7-713066 | IKE Remote Peer configured for SA: SA name. (7.0) |
%PIX-7-713079 | Unknown message text. (7.0) |
%PIX-7-713094 | Cert validation failure: handle invalid for Main/Aggressive Mode Initiator/Responder! (7.0) |
%PIX-7-713096 | Unknown message text. (7.0) |
%PIX-7-713097 | Unknown message text. (7.0) |
%PIX-7-713099 | Tunnel Rejected: Received NONCE length number is out of range! (7.0) |
%PIX-7-713101 | Unknown message text. (7.0) |
%PIX-7-713103 | Invalid (NULL) secret key detected while computing hash. (7.0) |
%PIX-7-713104 | Attempt to get Phase 1 ID data failed while hash computation. (7.0) |
%PIX-7-713108 | Unknown message text. (7.0) |
%PIX-7-713113 | Deleting IKE SA with associated IPSec connection entries. IKE peer: IP address, SA addr: internal SA address, tunnel count: count. (7.0) |
%PIX-7-713114 | Connection entry (conn entry internal address) points to IKE SA (SA internal address) for peer IP address, but cookies don't match. (7.0) |
%PIX-7-713117 | Received Invalid SPI notify (SPI SPI Value)! (7.0) |
%PIX-7-713121 | Keep-alive type for this connection: keepalive type. (7.0) |
%PIX-7-713143 | Processing firewall record. Vendor: vendor(id), Product: product(id), Caps: capability value, Version Number: version number, Version String: version text. (7.0) |
%PIX-7-713160 | Remote user (session Idid) has been granted access by the Firewall Server. (7.0) |
%PIX-7-713164 | The Firewall Server has requested a list of active user sessions. (7.0) |
%PIX-7-713169 | IKE Received delete for rekeyed SA IKE peer: IP address, SA addr: internal SA address, tunnelCnt: tunnel cnt. (7.0) |
%PIX-7-713170 | IKE Received delete for rekeyed centry IKE peer: IP_address, centry addr: internal_address, msgid: id. (7.0) |
%PIX-7-713171 | NAT-Traversal sending NAT-Original-Address payload. (7.0) |
%PIX-7-713173 | Unknown message text. (7.0) |
%PIX-7-713187 | Tunnel Rejected: IKE peer does not match remote peer as defined in L2L policy IKE peer address: IP_address, Remote peer address: IP_address. (7.0) |
%PIX-7-713190 | Got bad refCnt (refcnt_value) assigning IP address (IP_address). (7.0) |
%PIX-7-713192 | Unknown message text. (7.0) |
%PIX-7-713204 | Adding static route for client address: IP address. (7.0) |
%PIX-7-713221 | Static Crypto Map check, checking map = crypto map tag, seq = seq #... (7.0) |
%PIX-7-713222 | Static Crypto Map check, map = crypto map tag, seq = seq #, ACL does not match proxy IDs src:address dst:address. (7.0) |
%PIX-7-713223 | Static Crypto Map check, map = crypto map tag, seq = seq #, no ACL configured. (7.0) |
%PIX-7-713224 | Static Crypto Map Check by-passed: Crypto map entry incomplete! (7.0) |
%PIX-7-713225 | [IKEv1], Group = group_name, IP = ip_address, Static Crypto Map check, map map_name, seq = sequence_number is a successful match. (7.0) |
%PIX-7-713906 | debug_message. (7.0: VPN) |
%PIX-7-714001 | Description of event or packet. (7.0: IKE) |
%PIX-7-714002 | IKE Initiator starting QM: msg id = message_ID_value. (7.0) |
%PIX-7-714003 | IKE Responder starting QM: msg id = message_ID_value. (7.0) |
%PIX-7-714004 | IKE Initiator sending 1st QM pkt: msg id = message_ID_value. (7.0) |
%PIX-7-714005 | IKE Responder sending 2nd QM pkt: msg id = message_ID_value. (7.0) |
%PIX-7-714006 | IKE Initiator sending 3rd QM pkt: msg id = message_ID_value. (7.0) |
%PIX-7-714007 | IKE Initiator sending Initial Contact. (7.0) |
%PIX-7-714008 | Unknown message text. (7.0) |
%PIX-7-714009 | Unknown message text. (7.0) |
%PIX-7-714010 | Unknown message text. (7.0) |
%PIX-7-714011 | Description of received ID values. (7.0) |
%PIX-7-715001 | Descriptive statement. (7.0) |
%PIX-7-715002 | Unknown message text. (7.0) |
%PIX-7-715003 | Unknown message text. (7.0) |
%PIX-7-715004 | subroutine name() Q Send failure: RetCode (return code). (7.0) |
%PIX-7-715005 | subroutine name() Bad message code: Code (message code). (7.0) |
%PIX-7-715006 | IKE got SPI from key engine: SPI = SPI value. (7.0) |
%PIX-7-715007 | IKE got a KEY_ADD msg for SA: SPI = SPI value. (7.0) |
%PIX-7-715008 | Could not delete SA SA address, refCnt = number, caller = calling subroutine address. (7.0) |
%PIX-7-715009 | IKE Deleting SA: Remote Proxy IP address, Local Proxy IP address. (7.0) |
%PIX-7-715010 | Unknown message text. (7.0) |
%PIX-7-715011 | Unknown message text. (7.0) |
%PIX-7-715012 | Unknown message text. (7.0) |
%PIX-7-715013 | Tunnel negotiation in progress for destination IP address, discarding data. (7.0) |
%PIX-7-715014 | Unknown message text. (7.0) |
%PIX-7-715015 | Unknown message text. (7.0) |
%PIX-7-715016 | Unknown message text. (7.0) |
%PIX-7-715017 | Unknown message text. (7.0) |
%PIX-7-715018 | Unknown message text. (7.0) |
%PIX-7-715019 | IKEGetUserAttributes: Attribute name = Attribute value. (7.0) |
%PIX-7-715020 | construct_cfg_set: Attribute name = Attribute value. (7.0) |
%PIX-7-715021 | Delay Quick Mode processing, Cert/Trans Exch/RM DSID in progress. (7.0) |
%PIX-7-715022 | Resume Quick Mode processing, Cert/Trans Exch/RM DSID completed. (7.0) |
%PIX-7-715023 | Unknown message text. (7.0) |
%PIX-7-715024 | Unknown message text. (7.0) |
%PIX-7-715025 | Unknown message text. (7.0) |
%PIX-7-715026 | Unknown message text. (7.0) |
%PIX-7-715027 | IPSec SA Proposal # chosen proposal, Transform # chosen transform acceptable Matches global IPSec SA entry # crypto map index. (7.0) |
%PIX-7-715028 | IKE SA Proposal # 1, Transform # chosen tranform acceptable Matches global IKE entry # crypto map index. (7.0) |
%PIX-7-715029 | Unknown message text. (7.0) |
%PIX-7-715030 | Unknown message text. (7.0) |
%PIX-7-715031 | Unknown message text. (7.0) |
%PIX-7-715032 | Unknown message text. (7.0) |
%PIX-7-715033 | Processing CONNECTED notify (MsgId message ID). (7.0) |
%PIX-7-715034 | action IOS keep alive payload: proposal=time 1/time 2 sec. (7.0) |
%PIX-7-715035 | Starting IOS keepalive monitor: seconds sec. (7.0) |
%PIX-7-715036 | Sending keep-alive of type notify type (seq number number). (7.0) |
%PIX-7-715037 | Unknown IOS Vendor ID version: major.minor.variance. (7.0) |
%PIX-7-715038 | action Spoofing information Vendor ID payload (version: major.minor.variance, capabilities: capabilities value). (7.0) |
%PIX-7-715040 | Deleting active auth handle during SA deletion: handle = internal authentication handle. (7.0) |
%PIX-7-715041 | Received keep-alive of type keepalive_type, not the negotiated type. (7.0) |
%PIX-7-715042 | IKE received response of type failure_type to a request from the IP address utility. (7.0) |
%PIX-7-715043 | Unknown message text. (7.0) |
%PIX-7-715044 | Ignoring Keepalive payload from vendor not support KeepAlive capability. (7.0) |
%PIX-7-715045 | ERROR: malformed Keepalive payload. (7.0) |
%PIX-7-715046 | Constructing payload_description payload. (7.0) |
%PIX-7-715047 | Processing payload_description payload. (7.0) |
%PIX-7-715048 | Send VID_type VID. (7.0) |
%PIX-7-715049 | Received VID_type VID. (7.0) |
%PIX-7-715050 | Claims to be IOS but failed authentication. (7.0) |
%PIX-7-715051 | Received unexpected TLV type TLV_type while processing FWTYPE ModeCfg Reply. (7.0) |
%PIX-7-715052 | Old P1 SA is being deleted but new SA is DEAD, can not transition centries. (7.0) |
%PIX-7-715053 | MODE_CFG: Received request for attribute_info! (7.0) |
%PIX-7-715054 | MODE_CFG: Received attribute_name reply: value. (7.0) |
%PIX-7-715055 | Send attribute_name. (7.0) |
%PIX-7-715056 | Client is configured for TCP_transparency. (7.0) |
%PIX-7-715057 | Auto-detected a NAT device with NAT-Traversal. Ignoring IPSec-over-UDP configuration. (7.0) |
%PIX-7-715058 | NAT-Discovery payloads missing. Aborting NAT-Traversal. (7.0) |
%PIX-7-715059 | Proposing/Selecting only UDP-Encapsulated-Tunnel and UDP-Encapsulated-Transport modes defined by NAT-Traversal. (7.0) |
%PIX-7-715060 | Dropped received IKE fragment. Reason: reason. (7.0) |
%PIX-7-715061 | Rcv'd fragment from a new fragmentation set. Deleting any old fragments. (7.0) |
%PIX-7-715062 | Error assembling fragments! Fragment numbers are non-continuous. (7.0) |
%PIX-7-715063 | Successfully assembled an encrypted pkt from rcv'd fragments! (7.0) |
%PIX-7-715064 | IKE Peer included IKE fragmentation capability flags: Main Mode: true/false Aggressive Mode: true/false. (7.0) |
%PIX-7-715065 | IKE state_machine subtype FSM error history (struct data_structure_address) state, event: state/event pairs. (7.0) |
%PIX-7-715066 | Can't load an IPSec SA! The corresponding IKE SA contains an invalid logical ID. (7.0) |
%PIX-7-715067 | QM IsRekeyed: existing sa from different peer, rejecting new sa. (7.0) |
%PIX-7-715068 | QM IsRekeyed: duplicate sa found by addr, deleting old sa. (7.0) |
%PIX-7-715069 | Invalid ESP SPI size of SPI_size. (7.0) |
%PIX-7-715070 | Invalid IPComp SPI size of SPI_size. (7.0) |
%PIX-7-715071 | AH proposal not supported. (7.0) |
%PIX-7-715072 | Received proposal with unknown protocol ID protocol_ID. (7.0) |
%PIX-7-715073 | Unknown message text. (7.0) |
%PIX-7-715074 | Could not retrieve authentication attributes for peer IP_address. (7.0) |
%PIX-7-715075 | Group = group_name, Username = client, IP = ip_address Received keep-alive of type mess_type (seq number seq#). (7.0) |
%ASA-7-716008 | Group name User user WebVPN access granted to URL: url. (7.0) |
%ASA-7-716010 | Group name User user browse path failed. Unable to contact server. (7.0) |
%ASA-7-716011 | Group name User user browse path failed. Unable to contact server. (7.0) |
%ASA-7-716012 | Group name User user create file path. (7.0) |
%ASA-7-716013 | Group name User user close file path. (7.0) |
%ASA-7-716014 | Group name User user rename old to new. (7.0) |
%ASA-7-716015 | Group name User user remove file path. (7.0) |
%ASA-7-716016 | Group name User user create directory path. (7.0) |
%ASA-7-716017 | Group name User user remove directory path. (7.0) |
%ASA-7-716018 | WebVPN ACL parsed acl. (7.0) |
%ASA-7-716019 | WebVPN ACL parse error in acl: cannot resolve host. (7.0) |
%ASA-7-716020 | WebVPN ACL setting filter ID to id. (7.0) |
%ASA-7-716021 | WebVPN ACL parser error invalid destination mask in acl. (7.0) |
%ASA -7-716024 | Group name User user Unable to browse the network. Error: description. (7.0) |
%ASA -7-716025 | Group name User user Unable to browse domain domain. Error: description. (7.0) |
%ASA -7-716026 | Group name User user Unable to browse directory directory. Error: description. (7.0) |
%ASA -7-716027 | Group name User user Unable to view file file. Error: description. (7.0) |
%ASA-7-716028 | Group name User user Unable to remove file file. Error: description. (7.0) |
%ASA-7-716029 | Group name User user Unable to rename file file. Error: description. (7.0) |
%ASA-7-716030 | Group name User user Unable to modify file file. Error: description. (7.0) |
%ASA-7-716031 | Group name User user Unable to create file file. Error: description. (7.0) |
%ASA-7-716032 | Group name User user Unable to create folder folder. Error: description. (7.0) |
%ASA-7-716033 | Group name User user Unable to remove folder folder. Error: description. (7.0) |
%ASA-7-716034 | Group name User user Unable to write to file file. description. (7.0) |
%ASA-7-716035 | Group name User user Unable to read file file. description. (7.0) |
%ASA-7-716036 | Group name User user File Access: User username logged into the server server. (7.0) |
%ASA-7-716037 | Group name User user File Access: User username failed to log into the server server. (7.0) |
%PIX-7-718017 | Got timeout for unknown peer IP_address msg type message_type. (7.0) |
%PIX-7-718019 | Sent KEEPALIVE request to IP_address. (7.0) |
%PIX-7-718021 | Sent KEEPALIVE response to IP_address. (7.0) |
%PIX-7-718022 | Received KEEPALIVE request from IP_address. (7.0) |
%PIX-7-718023 | Received KEEPALIVE response from IP_address. (7.0) |
%PIX-7-718025 | Sent CFG UPDATE to IP_address. (7.0) |
%PIX-7-718026 | Received CFG UPDATE from IP_address. (7.0) |
%PIX-7-718029 | Sent OOS indicator to IP_address. (7.0) |
%PIX-7-718034 | Sent TOPOLOGY indicator to IP_address. (7.0) |
%PIX-7-718035 | Received TOPOLOGY indicator from IP_address. (7.0) |
%PIX-7-718036 | Process timeout for req-type type_value, exid exchange_ID, peer IP_address. (7.0) |
%PIX-7-718041 | Timeout [msgType=type] processed with no callback. (7.0) |
%PIX-7-718046 | Create group policy policy_name. (7.0) |
%PIX-7-718047 | Fail to create group policy policy_name. (7.0) |
%PIX-7-718049 | Created secure tunnel to peer IP_address. (7.0) |
%PIX-7-718058 | State machine return code: action_routine, return_code. (7.0) |
%PIX-7-718059 | State machine function trace: state=state_name, event=event_name, func=action_routine. (7.0) |