topic show conn in Network Security

show conn

kunal-united — Mon, 11 Mar 2019 21:34:08 GMT

Hi,

# sh conn

TCP out 192.168.173.163:38105 in 10.10.192.54:3096 idle 0:00:14 Bytes 504 flags UfFrRIOB

TCP out 192.168.173.81:54814 in 10.10.194.142:3091 idle 0:00:06 Bytes 1147425 flags UIOB

Does sh conn# command tell you whether source 192.168.173.163 is accessing 10.10.192.254 directly.

Or this command tells you that a NAT is happening.

I assume is that destination 10.10.192.254 is getting NATTED with some other ip in between and that this command doesnt give you the info.

Basically, I think it the source can see the NATTED ip as well as the direct ip also.

Please let me know

Thanks,

Kunal

show conn

varrao — Wed, 05 Oct 2011 15:17:14 GMT

Hi Kunal,

Show conn tell you the number of connections going through the ASA, it tell you the connection between the source and destination. If you want to know if a particular ip is getting natted or not, then use:

show xlate | in 10.10.192.254

This gives you whether the translation is being made or not.

Hope that helps.

Thanks,

Varun

show conn

varrao — Wed, 05 Oct 2011 15:19:45 GMT

Here's the command reference as well:

http://www.cisco.com/en/US/partner/docs/security/asa/asa82/command/reference/s2.html#wp1396672

Varun

show conn

kunal-united — Wed, 05 Oct 2011 15:32:31 GMT

Hi Varun,

I am not able to access the page.

Thanks

show conn

varrao — Wed, 05 Oct 2011 15:46:13 GMT

Try now:

http://www.cisco.com/en/US/customer/docs/security/asa/asa82/command/reference/s2.html#wp1396672