Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Question about ACE show Conn command (tcp duration)


I was checking connections and noticed that I would see the initial connection, but after a short time the connection quits showing up in the counters and the “show conn” command. However the user is still up and working.

This is the command I used:

sho conn serverfarm STAGING-HTTPS detail

The output shows all the connection info from source to destination, and in the ESTABLISHED state.

However, after maybe 2~3 minutes, when I up arrow I don't see any connection info. The web page is still up. If I refresh the web page, I do see the connections come in.

Can someone kindly point me to a document or provide an answer on how long should the connection be stored before they are flushed?

Config profile:

4 real servers

HTTPS protocol

Leastconn for predictor

sticky based on src/dst IP



New Member

Re: Question about ACE show Conn command (tcp duration)

The "sh conn" command provides you a live view.

Web sites with static content are called once by your browser.

So, if you see the website, the tcp connection is already closed.

If you refresh the site, the browser opens a new connection.

Cisco Employee

Re: Question about ACE show Conn command (tcp duration)


If you would play with a sniffer capture, you could answer the question yourself.

If the browser loads a flash object or a java applet, once it is loaded, you can still work on the page but there is no data transfer.

with a sniffer tool you could see the browser closing the connections.

The default TCP idle timeout on ACE is 1 hour.


CreatePlease to create content