Solved: direction of udp connection in ASA

Ivan Denezhkin · ‎12-04-2011

Hello.

How can i determine direction of udp connection in ASA?

cadet alain · ‎12-05-2011

Hi,

yes there are no flags but looking at the ports you know it is SNMP and port 161 is the agent port for receiving requests

so it is 44.44.44.190.211 which initiated a SNMP request to 100.74.53.18.

But you're right we can't see in the output which initiated the connection as there is no flag because UDP is connectionless.

Regards.

Alain

Don't forget to rate helpful posts.

cadet alain · ‎12-05-2011

Hi,

show conn protocol udp.

Regards.

Alain

Don't forget to rate helpful posts.

Ivan Denezhkin · ‎12-05-2011

Alain, how can you determine direction for this connection?

show conn protocol udp

UDP outside:44.44.190.211/36923 inside:100.74.53.18/161, flags -, idle 3s, uptime 3s, timeout 2m0s, bytes 871

There are no flags, which show originator of connection.

cadet alain · ‎12-05-2011

Hi,

yes there are no flags but looking at the ports you know it is SNMP and port 161 is the agent port for receiving requests

so it is 44.44.44.190.211 which initiated a SNMP request to 100.74.53.18.

But you're right we can't see in the output which initiated the connection as there is no flag because UDP is connectionless.

Regards.

Alain

Don't forget to rate helpful posts.