How to view active connections with PDM?

[jksnook]

Is there a way to view active connections to the internet using PDM? And is there a way to disconnect just one connection?

Thanks,

J

[r.state]

can't be done using PDM - hopefully this may become an added feature in the future, but for now only the "show conn" cli command will show this info.

[mostiguy]

but you can use the cli applet in PDM to manually issue the "show conn" command

[shannong]

Using Tools in the PDM, you can use [show conn local x.x.x.x] This will show all connections associated with the internal address x.x.x.x.

While you can't clear particular connections, you can clear the xlates associated with the connection to cause the connection to be closed.

[clear xlate local x.x.x.x] would clear any translation and all related connections for the IP. If you're using PAT, you can use the extended form of the command to specificy the actual ports of the translation which would clear a single connection that was associated with it.

[shannong]

I also wanted to add that you can use the [shun] command to kill a particular connection/session. In addition to blocking the next packet even if the connection is already open, the Pix will close the existing connection when using the [shun] command.

shun src_ip [dst_ip src_prt dst_prt [prot] ]