topic show conn details in Network Security

show conn details

prashantrecon — Mon, 11 Mar 2019 21:52:13 GMT

Can u anybody explain what do mean by saA when show connection details command is excuted.

varrao — Thu, 17 Nov 2011 13:21:58 GMT

You can follow this command reference for the connection flags:

Hope that helps.

Thanks,

Varun

prashantrecon — Thu, 17 Nov 2011 13:39:31 GMT

Hi Varun,

I geeting the below output

tcp outside 10.17.x.x :3389 inside 172.18.x.x :3166 idle 0:00:00 bytes 0, flags saA

from the above output i think syn request is going to 10.17.x.x but there is no response from that server is it correct ?

ajay chauhan — Thu, 17 Nov 2011 14:05:02 GMT

Standard TCP protocol requires that the receiver respond to an initial SYN packet with a SYN ACK.

The flags saA indicate that we saw a SYN from an inside client and are awaiting the SYN ACK (sa) from the outside host

and then the ACK (A) from the inside host in response to the SYN ACK.

prashantrecon — Thu, 17 Nov 2011 14:17:09 GMT

so that is what i want to know request is going from inside but there is no response from outside (far end)

is it correct

ajay chauhan — Thu, 17 Nov 2011 14:20:16 GMT

thats correct.

prashantrecon — Fri, 18 Nov 2011 05:04:14 GMT

Thank you