Symptom

ASA generating syslogs indicating dropping of icmp (type 3, code 3) drops (example below): %ASA-3-106014: Deny inbound icmp src inside:192.168.1.100 dst nlp_int_tap:169.254.1.2 (type 3, code 3)

Conditions

++ ASA running 9.14+ ++ ASA sending UDP traffic to host that is not listening on that port (e.g. snmp, syslog, etc)

Workaround

++ Remove configuration that is sending UDP traffic to client with closed port ++ Suppress log 106014 via "no logging message 106014"

Further Problem Description