At corporate HQ, I have an ASA5510 behind a router doing PAT with Lan-2-Lan IPSEC VPNs terminating at 3 other sites (2 with PIX 501s not behind routers and one with ASA5510 behind a router also doing PAT). When I do "sh ip nat tra" on the HQ router, at the bottom of the list I see "Incomplete ESP translations:" followed by one or two lines like this:
0 esp_conn=0x8409C428, hanging off nat entry 0x84062D30
1 esp_conn=0x8409C408, hanging off nat entry 0x8405F430
Can anyone tell me what this means, what causes it, and whether it is a problem?