Link to home
Start Free TrialLog in
Avatar of bnoyzy
bnoyzy

asked on

Cisco ASA 5505 syslog - Reaper (old VPN logon)

Hey,
I am looking at my running logs in ASDM and these keep coming up very frequently (every few seconds):

3      Apr 21 2009      16:44:13      713232                   Group = <group_name>, Username = <username>, IP = 220.<rest of IP>, SA lock refCnt = 0, bitmask = 00000080, p1_decrypt_cb = 0, qm_decrypt_cb = 0, qm_hash_cb = 0, qm_spi_ok_cb = 0, qm_dh_cb = 0, qm_secret_key_cb = 0, qm_encrypt_cb = 0

5      Apr 21 2009      16:44:13      713137                   Group = <group_name>, Username = <username>, IP = 220.<rest of IP>, Reaper overriding refCnt [0] and tunnelCnt [0] -- deleting SA!

I gather it was a session that was established at least 2 weeks ago. I know its not connected anymore but I want to know what has cuased this and how to get rid of this error from spamming my logs.

ASKER CERTIFIED SOLUTION
Avatar of MikeKane
MikeKane
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of bnoyzy
bnoyzy

ASKER

Thanks MikeKane, I will try this and let you know how it goes...
Avatar of bnoyzy

ASKER

After resetting the ASA the errors ceased.
I know now that it was due to the user logging in using a linux vpn application. The cisco must not be compatible. I will have to get time to look into this, if I find anything out I will post it here.