article acs sh conn problem in Data Center and Cloud Knowledge Base

acs sh conn problem

chanchan1029 — Fri, 03 May 2013 00:35:41 GMT

Hello

Please give me the ACE.

You When you sh conn setting of the current configuration, session information is displayed.

1148798 1 in TCP 2 172.16.22.178:49895 10.1.100.25:8181 ESTAB

1157580 1 out TCP 12 10.1.100.26:8181 172.16.22.178:49895 CLOSED

Session of the current pair have been identified.

The current session is closed, but the information of big-eye red current continues to sh conn session information.

I want to know that there are times when it may be a problem at this time

Thank you.

Re: acs sh conn problem

Jorge Bejarano — Fri, 03 May 2013 03:47:46 GMT

Gyoun,

Please see the following document and the drawing called: "TCP Connection Teardown"

http://docwiki.cisco.com/wiki/Cisco_Application_Control_Engine_%28ACE%29_Troubleshooting_Guide_--_Troubleshooting_Connectivity#ACE_Connection_Table_Entries

Then that output just shows the connection when it is being RST, but we do not have enough details.

Where do you see this behavior? Are you having any issue related to RST connections?

Jorge

Re: acs sh conn problem

ajayku2 — Sat, 04 May 2013 09:02:08 GMT

If you are talking about the following connection:

1157580 1 out TCP 12 10.1.100.26:8181 172.16.22.178:49895 CLOSED

If you are seeing the above entry in table for a long time then it is possible that the connection is not properly closed. We also say it half closed connection.

For example ACE receives FIN it forward to the server mark the connection as closed and then it wait for FIN-ACK.

If the server does not send the FIN-ACK for some reason this entry may be there for 1 hour and then it clear after timeout.

So verify with capture if that is the case.

You can also use connection parameter map to reduce the half close session timeout to remove such entry faster.

hope that helps,

Ajay Kumar