[c-nsp] Bad TCP Hdr ASA syslog message

Scott Voll svoll.voip at gmail.com
Mon Oct 24 14:04:42 EDT 2011


I'm getting syslogs from my ASA:

10/24/2011 11:01 AM :   %ASA-5-500003: Bad TCP hdr length (hdrlen=24,
pktlen=58) from 110.75.27.14/80 to x.y.z.a/23597, flags: SYN ACK , on
interface Outside

Since I have this Block from China as my first deny statement, Why do I
still get these Syslogs?

Thanks

Scott


More information about the cisco-nsp mailing list