Symptom:
stuck ICMP connections are observed in ACE which were not getting cleared even by issuing the command "clear conn" or "clear conn all".


Conditions:
This problem is observed when we are running both tcp and udp based traffic flows e.g. DNS traffic as well as SSL/http traffic.In this case if because of some network failure if there is a ICMP port/device unreachable messages coming from downstream then ACE may send the ICMP connections to the upstream. These ICMP connections may be stuck forever and resulting into a resource leakage.