topic Re: Quick PIX syslog Q! in Network Security https://community.cisco.com/t5/network-security/quick-pix-syslog-q/m-p/761871#M1008667 <HTML><HEAD></HEAD><BODY><P>Brilliant, Thanks David.</P></BODY></HTML> Fri, 30 Mar 2007 16:01:20 GMT jigsaw2026 2007-03-30T16:01:20Z Quick PIX syslog Q! https://community.cisco.com/t5/network-security/quick-pix-syslog-q/m-p/761869#M1008650 <P>If a PIX closes a half-closed TCP connection after it's timeout period (default 10 mins), what code/text would that be logged as?</P><P></P><P>Thanks,</P><P>J</P> Mon, 11 Mar 2019 09:54:10 GMT https://community.cisco.com/t5/network-security/quick-pix-syslog-q/m-p/761869#M1008650 jigsaw2026 2019-03-11T09:54:10Z Re: Quick PIX syslog Q! https://community.cisco.com/t5/network-security/quick-pix-syslog-q/m-p/761870#M1008659 <HTML><HEAD></HEAD><BODY><P>The PIX would log syslog 302014 (TCP connection termination message), and the reason would be "FIN Timeout"</P><P></P><P>%PIX|ASA-6-302014: Teardown TCP connection id for interface:real-address/real-port to interface:real-address/real-port duration hh:mm:ss bytes bytes [reason] [(user)]</P><P></P><P>Hope it helps,</P><P></P><P>David.</P></BODY></HTML> Fri, 30 Mar 2007 15:25:09 GMT https://community.cisco.com/t5/network-security/quick-pix-syslog-q/m-p/761870#M1008659 David White 2007-03-30T15:25:09Z Re: Quick PIX syslog Q! https://community.cisco.com/t5/network-security/quick-pix-syslog-q/m-p/761871#M1008667 <HTML><HEAD></HEAD><BODY><P>Brilliant, Thanks David.</P></BODY></HTML> Fri, 30 Mar 2007 16:01:20 GMT https://community.cisco.com/t5/network-security/quick-pix-syslog-q/m-p/761871#M1008667 jigsaw2026 2007-03-30T16:01:20Z