cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
631
Views
0
Helpful
2
Replies

Question about ACE show Conn command (tcp duration)

RAMAN AZIZIAN
Level 1
Level 1

Hello,

I was checking connections and noticed that I would see the initial connection, but after a short time the connection quits showing up in the counters and the “show conn” command. However the user is still up and working.

This is the command I used:

sho conn serverfarm STAGING-HTTPS detail

The output shows all the connection info from source to destination, and in the ESTABLISHED state.

However, after maybe 2~3 minutes, when I up arrow I don't see any connection info. The web page is still up. If I refresh the web page, I do see the connections come in.

Can someone kindly point me to a document or provide an answer on how long should the connection be stored before they are flushed?

Config profile:

4 real servers

HTTPS protocol

Leastconn for predictor

sticky based on src/dst IP

Thanks,

Raman

2 Replies 2

AverageAdmin
Level 1
Level 1

The "sh conn" command provides you a live view.

Web sites with static content are called once by your browser.

So, if you see the website, the tcp connection is already closed.

If you refresh the site, the browser opens a new connection.

Gilles Dufour
Cisco Employee
Cisco Employee

Raman,

If you would play with a sniffer capture, you could answer the question yourself.

If the browser loads a flash object or a java applet, once it is loaded, you can still work on the page but there is no data transfer.

with a sniffer tool you could see the browser closing the connections.

The default TCP idle timeout on ACE is 1 hour.

Gilles.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: