topic Re: Show Connections - No Flags? in Network Security

Show Connections - No Flags?

grizzlyfireguy — Mon, 11 Mar 2019 20:18:25 GMT

Hi all,

I have an old Cisco PIX (I know, out of support, replacing later this year) - and was wondering if anyone would know why when I type in the option "show conn", some connections come back with no flags?

TCP out xxx.xxx.xxx.xxx:443 in xxx.xxx.xxx.xxx:7102 idle 0:01:12 Bytes 7543 flags UIO
UDP out xxx.xxx.xxx.xxx:12001 in xxx.xxx.xxx.xxx:12001 idle 0:01:24 flags -

You see above with flags UIO, but then next one has no flags at all. I am having an issue connecting with a remote server, and I'm not sure but I think this may be one of the reasons?

Any advice/feedback would be much appreciated. I have a PIX 506E 6.3(3).

thanks!

Richard

Re: Show Connections - No Flags?

grizzlyfireguy — Thu, 07 Apr 2011 21:22:41 GMT

It should be noted also that I'm not getting any bytes showing either if you compare the TCP to the UDP above.

Re: Show Connections - No Flags?

Shrikant Sundaresh — Thu, 07 Apr 2011 21:34:51 GMT

Hi Richard,

TCP connections have a list of Flags associated with them, since they can be in various stages of a connection.

The second connection is a UDP connection and therefore does not have any flags associated with it.

-Shrikant

P.S.: Please mark the question resolved, if it has been answered. Do rate helpful posts. Thanks.

Re: Show Connections - No Flags?

grizzlyfireguy — Thu, 07 Apr 2011 21:38:22 GMT

Thanks so much! I hope there's no such think as a silly question!

Re: Show Connections - No Flags?

Shrikant Sundaresh — Thu, 07 Apr 2011 21:43:29 GMT

Hi Richard,

I firmly believe that there is no such thing as a silly question.

There are actually some flags you may see on a UDP connection though.

D - DNS connection

t,T - SIP connection (t indicates timeout is set to 1 minute; T indicates there is a user defined timeout).

However the usual flags you see beside TCP connections don't apply to UDP connections.

Happy to help.

-Shrikant

Re: Show Connections - No Flags?

grizzlyfireguy — Thu, 07 Apr 2011 21:45:58 GMT

Hi Shrikant,

Should I be concerned if I do not see any flags at all? No bytes as well?

Re: Show Connections - No Flags?

Shrikant Sundaresh — Thu, 07 Apr 2011 22:21:48 GMT

Hi Richard,

To the best of my knowledge, UDP connections won't show bytes transferred. And there is no concern if there are no flags. Most UDP connections (other than DNS and SIP) will not have any flags associated with them.

-Shrikant

Re: Show Connections - No Flags?

fernandodeandradework34210 — Mon, 03 Jun 2024 20:24:48 GMT

Hi Team,

Just updating, on ASA deployments with dual-imaged SFR modules, UDP connections can also have a X flag, indicating that is 'inspected by service module'.