scanning threat 733100 not showing source , destination or port

[TPSupport298]

Running ASA 5510 with Software Version 8.2(2)

Device Manager 6.2(5)

We have threat detection enabled and shunning of hosts enabled .

We are seeing consistent logging of even 733100:

4

Sep 30 2014

10:12:59

733100

[ Scanning] drop rate-1 exceeded. Current burst rate is 2 per second, max configured rate is 10; Current average rate is 7 per second, max configured rate is 5; Cumulative total count is 4383

The source and destination IPs are not being shown for any of these scans . Is there a setting that I am missing ? Obviously we cannot shun any hosts if we don't have a host IP address .

Any input would be greatly appreciated.

thanks

Jack

[Vibhor Amrodia]

Hi Jack,

As per your description , I think you only have the Basic Threat Detection enabled on the ASA device.

This syslog will never show the IP address. If you want to check the statistics per IP address basis , you would have to configure the Threat Detection Statistics on the ASA device:-

http://www.cisco.com/c/en/us/td/docs/security/asa/asa82/configuration/guide/config/conns_threat.html#wp1091680

Thanks and Regards,

Vibhor Amrodia