topic Re: Empty PIX connection flags in Network Security https://community.cisco.com/t5/network-security/empty-pix-connection-flags/m-p/236755#M591407 <HTML><HEAD></HEAD><BODY><P>I don't have enough information to be sure but I suspect this is CSCec45748 - New DNS conns reset the idle timer of previous DNS conns. My suggestion would be to open a TAC case and request the latest 6.3(3) interim release to see if this resolves the issue. Sorry for the problems.</P><P></P><P>Scott</P></BODY></HTML> Tue, 13 Jul 2004 12:00:07 GMT scoclayton 2004-07-13T12:00:07Z Empty PIX connection flags https://community.cisco.com/t5/network-security/empty-pix-connection-flags/m-p/236752#M591403 <P>I have a huge amount of empty connection flags when sh conn detail | include x.x.x.x command is issued.</P><P></P><P>UDP outside: 64.246.x.x/53 inside: 172.16.x.x/1075 flags - </P><P></P><P>It's slowing down pix - any help appreciated.</P><P></P><P></P> Fri, 21 Feb 2020 07:30:15 GMT https://community.cisco.com/t5/network-security/empty-pix-connection-flags/m-p/236752#M591403 rahil.patel 2020-02-21T07:30:15Z Re: Empty PIX connection flags https://community.cisco.com/t5/network-security/empty-pix-connection-flags/m-p/236753#M591405 <HTML><HEAD></HEAD><BODY><P>looks like lot of UDP connections just staying and not clearing out. What is the PIX code you are running. We had a bug in an earlier code.</P><P></P><P>Thanks</P><P>Nadeem</P></BODY></HTML> Mon, 12 Jul 2004 21:38:21 GMT https://community.cisco.com/t5/network-security/empty-pix-connection-flags/m-p/236753#M591405 nkhawaja 2004-07-12T21:38:21Z Re: Empty PIX connection flags https://community.cisco.com/t5/network-security/empty-pix-connection-flags/m-p/236754#M591406 <HTML><HEAD></HEAD><BODY><P>6.3(3)</P></BODY></HTML> Mon, 12 Jul 2004 21:43:51 GMT https://community.cisco.com/t5/network-security/empty-pix-connection-flags/m-p/236754#M591406 rahil.patel 2004-07-12T21:43:51Z Re: Empty PIX connection flags https://community.cisco.com/t5/network-security/empty-pix-connection-flags/m-p/236755#M591407 <HTML><HEAD></HEAD><BODY><P>I don't have enough information to be sure but I suspect this is CSCec45748 - New DNS conns reset the idle timer of previous DNS conns. My suggestion would be to open a TAC case and request the latest 6.3(3) interim release to see if this resolves the issue. Sorry for the problems.</P><P></P><P>Scott</P></BODY></HTML> Tue, 13 Jul 2004 12:00:07 GMT https://community.cisco.com/t5/network-security/empty-pix-connection-flags/m-p/236755#M591407 scoclayton 2004-07-13T12:00:07Z