cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
319
Views
0
Helpful
2
Replies

Quick PIX syslog Q!

jigsaw2026
Level 1
Level 1

If a PIX closes a half-closed TCP connection after it's timeout period (default 10 mins), what code/text would that be logged as?

Thanks,

J

1 Accepted Solution

Accepted Solutions

David White
Cisco Employee
Cisco Employee

The PIX would log syslog 302014 (TCP connection termination message), and the reason would be "FIN Timeout"

%PIX|ASA-6-302014: Teardown TCP connection id for interface:real-address/real-port to interface:real-address/real-port duration hh:mm:ss bytes bytes [reason] [(user)]

Hope it helps,

David.

View solution in original post

2 Replies 2

David White
Cisco Employee
Cisco Employee

The PIX would log syslog 302014 (TCP connection termination message), and the reason would be "FIN Timeout"

%PIX|ASA-6-302014: Teardown TCP connection id for interface:real-address/real-port to interface:real-address/real-port duration hh:mm:ss bytes bytes [reason] [(user)]

Hope it helps,

David.

Brilliant, Thanks David.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: