Cisco Application Control Engine モジュール システム メッセージ ガイド Software Version A2(1.0)

重大度別メッセージ

---

この章では、次の内容が記載されています。

• アラート メッセージ、重大度 1

• クリティカル メッセージ、重大度 2

• エラーメッセージ、重大度 3

• 警告メッセージ、重大度 4

• 通知メッセージ、重大度 5

• 情報メッセージ、重大度 6

• デバッグ メッセージ、重大度 7

（注） ACE では、重大度 0 の緊急メッセージを syslog には送信しません。緊急メッセージは UNIX のパニック メッセージに相当し、システムが不安定になっていることを示します。

アラート メッセージ、重大度 1

重大度 1 のアラート メッセージでは、次のメッセージが表示されます。

• %ACE-1-106021: Deny protocol reverse path check from source_address to dest_address on interface interface_name

• %ACE-1-106028: WARNING: Access rule memory exhausted while processing Access-group. Incomplete rules are currently applied on interface interface-name. Manual roll back to a previous access rule configuration on this interface is needed.

• %ACE-1-444006: License manager exiting: reason

• %ACE-1-727001: hostname: HA: Peer IP address is not reachable. Error: error str.

• %ACE-1-727002: hostname: HA: FT interface interface name to reach peer IP address is down. Error: error str

• %ACE-1-727003: hostname: HA: Mismatch in context names detected for FT group FTgroupID. Cannot be redundant.

• %ACE-1-727004: hostname: HA: Two actives have been detected for FT group FTgroupID.

• %ACE-1-727005: hostname: HA: Config replication failed for context ctx name. Error : error str

• %ACE-1-727006: hostname: HA: Peer is incompatible due to error str. Cannot be Redundant.

• %ACE-1-727007: hostname: HA: Module Initialization failure - Error Error str.

• %ACE-1-727008: hostname: HA: Failed to send heartbeats to peer. Internal error: Error str

• %ACE-1-728001: Initialization failure (general) type variable1

• %ACE-1-728002: Initialization failure (sticky) type variable1

• %ACE-1-728003: Initialization failure (sticky hash) variable1 entries, variable2 min, variable3 max type variable4

クリティカル メッセージ、重大度 2

重大度 2 のクリティカル メッセージでは、次のメッセージが表示されます。

• %ACE-2-212007: SNMPD initialization failed while Variable1

• %ACE-2-313006: ICMP Manager Initialization Failed. Reason : Variable1

• %ACE-2-444001: License checkout failure for feature feature_name reason

• %ACE-2-444004: Evaluation license expired for feature feature_name

• %ACE-2-727009: hostname: HA: Communication failure for Peer Peer id Event: error str

• %ACE-2-727010: hostname: HA: Data replication failed for context ctx name. Error code error str

• %ACE-2-727011: HA: Configuration replication for context ctx name will not happen. Error: Error str

• %ACE-2-727012: hostname: HA: FT Group group ID changed state to NewState. Reason: reason str.

• %ACE-2-727013: hostname: HA: Peer Peer # is UP and reachable.

• %ACE-2-727014: hostname: HA: Heartbeats from Peer Peer id have become unidirectional.

• %ACE-2-727015: hostname: HA: Detected mismatch in heartbeat interval from Peer peer id. Modified interval to interval.

• %ACE-2-727016: hostname: HA: Replication for context ctx name has started. Status - status.

• %ACE-2-727017: hostname: HA: FT Track track type track name is UP.

• %ACE-2-727018: hostname: HA: FT Track track type track name is DOWN.

エラーメッセージ、重大度 3

重大度 3 のエラー メッセージでは、次のメッセージが表示されます。

• %ACE-3-212008: Failed while allocating memory in snmpd

• %ACE-3-251001: Probe configuration error, memory allocation failure.

• %ACE-3-251003: Could not load script script-name - File not found

• %ACE-3-251004: Could not load script script-name - memory allocation failure

• %ACE-3-251006: Health probe failed for server A.B.C.D on port P, internal error: error message

• %ACE-3-251007: ICMP health probe failed for server A.B.C.D, internal error: error message

• %ACE-3-251008: Health probe failed for server A.B.C.D on port P, connectivity error: server open timeout (no SYN ACK)

• %ACE-3-251009: ICMP health probe failed for server A.B.C.D, connectivity error: error message

• %ACE-3-251010: Health probe failed for server A.B.C.D on port P, error message

• %ACE-3-251011: ICMP health probe failed for server A.B.C.D, error message.

• %ACE-3-251012: Could not load script script-name - Error reading script-file

• %ACE-3-251013: Could not load script script-name - Error getting file size

• %ACE-3-313007: ICMP Manager Memory Problem. Reason: Variable1

• %ACE-3-322001: Deny MAC address MAC_address, possible spoof attempt on interface interface

• %ACE-3-322002: ARP inspection check failed for arp {request|response} received from host MAC_address on interface interface. This host is advertising MAC Address MAC_address_1 for IP Address IP_address, which is {statically|dynamically} bound to MAC Address MAC_address_2.

• %ACE-3-322003: ARP inspection check failed for arp {request|response} received from host MAC_address on interface interface. This host is advertising MAC Address MAC_address_1 for IP Address IP_address, which is not bound to any MAC Address.

• %ACE-3-327001: Detected Encap table Full when allocating encap entry for IP interface interface_name

• %ACE-3-440002: Addition failed for variable 1

• %ACE-3-440003: Deletion failed for variable 2

• %ACE-3-728005: Failed to transmit variable1 decision for connection from client variable2 type variable3

• %ACE-3-728007: Internal configuration communications error (sticky) type variable1

• %ACE-3-728008: Internal communications error (sticky) /source processor variable1 destination processor variable2 -- type variable3

• %ACE-3-728009: Context ID variable1 requested variable2 of variable3 sticky entries. No action taken. -- type variable4

• %ACE-3-728014: Internal cross-processor communications error (sticky) type variable1

• %ACE-3-728015: Internal channel communications error (sticky) type variable1

• %ACE-3-728017: Internal communications error (ha) -- type variable1

• %ACE-3-728031: Memory mapping for debug logging failed.

• %ACE-3-729001: Regular expression config download failed due to out of memory. No regexp rules are currently applied on class-map map_name in service-policy policy_name. Manual roll back to a previous regexp configuration on this service-policy is needed.

警告メッセージ、重大度 4

重大度 4 の警告メッセージでは、次のメッセージが表示されます。

• %ACE-4-106023: Deny protocol number | name src incoming-interface:src-ip dst outgoing-interface:dst-ip by access-group "acl-name" (hash 1, hash 2)

• %ACE-4-251002: The configured health probe script script-name for server A.B.C.D on port P is empty

• %ACE-4-251005: Could not unload script script-name

• %ACE-4-254001: ACL resource usage beyond maximum limit for context context_id. Free up some resources.

• %ACE-4-254002: Minimum ACL resources could not be guaranteed for context context_id.

• %ACE-4-313004: Denied ICMP type=icmp_type, from source_address on interface interface_name to dest_address:no matching session

• %ACE-4-400000: IDS:1000 IP Option Bad Option List from IP_address to IP_address on interface interface_name

• %ACE-4-405001: Received ARP {request | response} collision from IP_address/mac_address on interface interface_name

• %ACE-4-406001: FTP port command low port: IP_address/port to IP_address on interface interface_name

• %ACE-4-406002: FTP port command different address: IP_address(IP_address) to IP_address on interface interface_name

• %ACE-4-410001: Dropped UDP DNS packet_type from source_interface:source_address/source_port to dest_interface:dest_address/dest_port; error_length_type length length bytes exceeds max_length_type limit of maximum_length bytes.

• %ACE-4-411001: Line protocol on interface interface_name changed state to up

• %ACE-4-411002: Line protocol on interface interface_name changed state to down

• %ACE-4-411003: Configuration status on interface interface_name changed state to up

• %ACE-4-411004: Configuration status on interface interface_name changed state to down

• %ACE-4-412001: MAC MAC_address moved from interface_1 to interface_2

• %ACE-4-442001: Health probe probe name detected real_server_name (interface interface_name) in serverfarm sfarm_name changed state to UP

• %ACE-4-442002: Health probe probe name detected real_server_name (interface interface_name) in serverfarm sfarm_name changed state to DOWN

• %ACE-4-442004: Health probe probe name detected real_server_name (interface interface_name) changed state to UP

• %ACE-4-442005: Health probe probe name detected real_server_name (interface interface_name) changed state to DOWN

• %ACE-4-444005: Evaluation license for feature feature_name will expire in num_days days num_hours hours

• %ACE-4-444007: Installed feature_name license on Revision 6 or older hardware, will not take effect until next reboot.

• %ACE-4-608002: Dropping Skinny message for source_interface:source_address/source_port to destination_interface:destination_address/destination_port, SCCPPrefix length prefex_length too small

• %ACE-4-608003: Dropping Skinny message for source_interface:source_address/source_port to destination_interface:destination_address/destination_port, SCCPPrefix length prefex_length too large

• %ACE-4-608004: Dropping Skinny message for source_interface:source_address/source_port to destination_interface:destination_address/destination_port, message id message_id not allowed

• %ACE-4-608005: Dropping Skinny message for source_interface:source_address/source_port to destination_interface:destination_address/destination_port, message id message_id registration not complete

• %ACE-4-728011: Context ID variable1 being variable2 should not have variable3 associated sticky groups -- type variable4

• %ACE-4-728013: A cache alignment error variable1 was detected during initialization -- type variable2

• %ACE-4-728016: HA data receive failure (type variable1)

• %ACE-4-728019: Sticky resources were not variable1 for this context -- type variable2

• %ACE-4-728024: Received an unknown variable1 type message (variable2) for Sticky from remote IXP variable3!

• %ACE-4-728027: Received unhandled message of type variable1 from CP SrcSAP variable2.

• %ACE-LB_General-4-728032: Real Server variable1 in Serverfarm variable2 has reached configured threshold for HTTP retcode variable3

• %ACE-4-729002: Regex resource usage beyond maximum limit for context context_id. Free up some resources.

• %ACE-4-729003: Minimum regex resources could not be guaranteed for context context_id.

通知メッセージ、重大度 5

重大度 5 の通知メッセージでは、次のメッセージが表示されます。

• %ACE-5-111008: User user executed the command string

• %ACE-5-199006 : Orderly reload started at when by whom. Reload reason: reason

• %ACE-5-303004: FTP cmd_string command unsupported - failed strict inspection, terminating connection from source_interface:source_address/source_port to dest_interface:dest_address/dest_interface

• %ACE-5-304001: user source_address Accessed {URL} dest_address: url Connection connection_ID

• %ACE-5-415004:HTTP - matched mime_type in policy-map policy_map_name, content-type verification failed from source_address to dest_address/port_num Connection connection_ID

• %ACE-5-415006: HTTP - matched class_map_name in policy_map_name, URI matched connection_action from source_address/port_num to dest_address/port_num Connection connection_ID

• %ACE-5-415007: HTTP - matched class_map_name in policy-map policy_map_name, Body matched connection_action from IP_address/port_num to IP_address/port_num Connection connection_ID

• %ACE-5-415008: HTTP - matched class_map_name in policy-map policy_map_name, Header matched connection_action from IP_address/port_num to IP_address/port_num Connection connection_ID

• %ACE-5-415009: HTTP - matched class_map_name in policy-map policy_map_name, method matched - connection_action from IP_address/port_num to IP_address/port_num Connection connection_ID

• %ACE-5-415010: HTTP - matched class_map_name in policy-map policy_map_name, transfer encoding matched connection_action from IP_address/port_num to IP_address/port_num Connection connection_ID

• %ACE-5-415011: HTTP - policy-map policy_map_name:Protocol violation connection_action from IP_address/port_num to IP_address/port_num Connection connection_ID

• %ACE-5-415021: HTTP - matched class_map_name in policy-map policy_map_name, URI length range matched connection_action from source_address/port_num to dest_address/port_num Connection connection_ID

• %ACE-5-415022: HTTP - matched class_map_name in policy_map_name, Header length range matched connection_action from source_address/port_num to dest_address/port_num Connection connection_ID

• %ACE-5-415023: HTTP - matched class_map_name in policy-map policy_map_name, body length range matched connection_action from source_interface:source_address/port_num to dest_interface:dest_address/port_num Connection connection_ID

• %ACE-5-415024:HTTP - matched class_map_name in policy-map policy_map_name, Header content type matched connection_action from IP_address/port_num to IP_address/port_num Connection connection_ID

• %ACE-5-415025: HTTP policy_map_name - Tunnel detected - connection_action from IP_address/port_num to IP_address/port_num connection connection_ID

• %ACE-5-415026: HTTP policy_map_name: Instant Messenger detected connection_action from IP_address/port_num to IP_address/port_num connection connection_ID

• %ACE-5-415027: HTTP policy_map_name: Peer-to-Peer detected connection_action from IP_address/port_num to IP_address/port_num connection connection_ID

• %ACE-5-441001: Serverfarm name failed over to backup. Number of failovers = count1, number of times back in service = count2

• %ACE-5-441002: Serverfarm name is back in service. Number of failovers = count1, number of times back in service = count2

• %ACE-5-442003: Real Server real_server_name in serverfarm sfarm_name changed state to new state

• %ACE-5-444002: Installed license file license_file_name

• %ACE-5-444003: Uninstalled license file license_file_name

• %ACE-4-444007: Installed feature_name license on Revision 6 or older hardware, will not take effect until next reboot.

• %ACE-5-504001: Security context context-name was added to the system

• %ACE-5-504002: Security context context-name was successfully removed from the system

• %ACE-5-727019: hostname: HA: Started alternate ping to IP address ip addr

• %ACE-5-727020: hostname: HA: Stopped alternate ping to IP address ip addr.

• %ACE-5-727021: hostname: HA: Peer is compatible.

• %ACE-5-727022: hostname: HA: Started sending heartbeats to peer Peer id interval value and count cnt

• %ACE-5-727023: hostname: HA: Stopped sending heartbeats to peer Peer id.

• %ACE-5-728004: Internal communications notice (general) type variable1

• %ACE-5-728006: Internal communications error (messaging) msg subType variable1 -- type variable2

• %ACE-5-728012: Context ID variable1 failed to receive return data -- type variable2

• %ACE-5-728018: Proxy connection variable1 rebalanced to server variable2

• %ACE-5-728028: Sticky mapping failed: variable1 variable2

情報メッセージ、重大度 6

重大度 6 の情報メッセージでは、次のメッセージが表示されます。

• %ACE-6-253001: Certificate certificate_information expired

• %ACE-6-253002: Certificate certificate_information not yet valid

• %ACE-6-253003: Unknown CA certificate_information

• %ACE-6-253004: Certificate certificate_information revoked

• %ACE-6-253005: Signature for certificate_information is invalid

• %ACE-6-253006: Error peer sent invalid or nonexistent certificate

• %ACE-6-253007: Certificate in file file_name is expired

• %ACE-6-253008: CRL crl_name could not be retrieved

• %ACE-6-302022: Built TCP connection id for interface:real-address/real-port (mapped-address/mapped-port) to interface:real-address/real-port (mapped-address/mapped-port)

• %ACE-6-302023: Teardown TCP connection id for interface:real-address/real-port to interface:real-address/real-port duration hh:mm:ss bytes bytes [reason]

• %ACE-6-302024: Built UDP connection id for interface:real-address/real-port (mapped-address/mapped-port) to interface:real-address/real-port (mapped-address/mapped-port)

• %ACE-6-302025: Teardown UDP connection id for interface:real-address/real-port to interface:real-address/real-port duration hh:mm:ss bytes bytes

• %ACE-6-302026: Built ICMP connection for faddr/NATed_ID gaddr/icmp_type laddr/icmpID

• %ACE-6-302027: Teardown ICMP connection for faddr/NATed ID gaddr/icmp_type laddr/icmpID

• %ACE-6-302028: Built TCP connection id for interface: real-address/real-port (mapped-address/mapped-port) to interface: real-address/real-port (mapped-address/mapped-port)

• %ACE-6-302029: Teardown TCP connection id for interface: real-address/real-port to interface: real-address/real-port duration hh:mm:ss bytes bytes [reason]

• %ACE-6-302030: Built UDP connection id for interface: real-address/real-port (mapped-address/mapped-port) to interface: real-address/real-port (mapped-address/mapped-port)

• %ACE-6-302031: Teardown UDP connection id for interface: real-address/real-port to interface: real-address/real-port duration hh:mm:ss bytes bytes

• %ACE-6-303003: FTP cmd_name command denied - failed strict inspection, terminating connection from source_interface:source_address/source_port to dest_interface:dest_address/dest_port

• %FWSM-6-305009: Built {dynamic|static} translation from interface_name [(acl-name)]:real_address to interface_name:mapped_address

• %FWSM-6-305010: Teardown {dynamic|static} translation from interface_name:real_address to interface_name:mapped_address duration time

• %ACE-6-314001: Pre-allocate RTSP UDP backconnection for foreign_address outside_address/outside_port to local_address inside_address/inside_port

• %ACE-6-608001: Pre-allocate Skinny connection_type secondary channel for source_interface:source_address/source_port to destination_interface:destination_address/destination_port from message_id message

• %ACE-6-615003: VLAN VLAN-number not available for configuring an interface

• %ACE-6-615004: VLAN VLAN-number available for configuring an interface

• %ACE-6-728020: LB is configured to consume variable1 bytes of memory.

• %ACE-6-728021: Found inconsistent sticky entry. Terminating variable1.

• %ACE-6-728022: Invalid hash table index (variable1) used for variable2

• %ACE-6-728023: variable1 variable2 sticky entries from ContextId variable3.

• %ACE-6-728025: Dropped variable1 'variable2' messages (variable3 total) from IXP variable4 to IXP variable5!

• %ACE-6-728026: Attempting to use invalid lookup key for variable1 processing.

• %ACE-6-728029: HA state for FtGroup variable1 changed from variable2 to variable3 State variable4.

• %ACE-6-728030: Silently discarding HA data: variable1

デバッグ メッセージ、重大度 7

• %ACE-7-111009: User user executed cmd:string