topic Re: fwsm conn flags in Network Security

fwsm conn flags

orbanattila — Mon, 11 Mar 2019 10:43:09 GMT

Hi,

Could anyone give me a clue what is the meening of the flag d(dump) in the following sh conn

TCP out 10.5.20.5:11723 in 10.14.5.11:6842 idle 0:00:00 Bytes 136 FLAGS - dBs

Thanks,

Attila

Re: fwsm conn flags

jgervia_2 — Wed, 11 Jul 2007 10:50:29 GMT

Hello,

You can see the flags by doing a 'show connection detail', though I'd suggest you have a pager length of 24 so it doesn't scroll by too quickly.

Flags: A - awaiting inside ACK to SYN, a - awaiting outside ACK to SYN,

B - initial SYN from outside, C - CTIQBE media, D - DNS, d - dump,

E - outside back connection, F - outside FIN, f - inside FIN,

G - group, g - MGCP, H - H.323, h - H.225.0, I - inbound data,

i - incomplete, J - GTP, j - GTP data, k - Skinny media,

M - SMTP data, m - SIP media, O - outbound data, P - inside back connection,

q - SQL*Net data, R - outside acknowledged FIN,

R - UDP SUNRPC, r - inside acknowledged FIN, S - awaiting inside SYN,

s - awaiting outside SYN, T - SIP, t - SIP transient, U - up

--Jason

Please rate this message if it helped solve some/all of your issue or question.

Re: fwsm conn flags

Jon Marshall — Wed, 11 Jul 2007 10:56:59 GMT

Hi Attila

it means cleaning up the connection

=============================================

state

Display active connections by their current state: up (up), FIN inbound (finin), FIN outbound (finout), HTTP get (http_get), SMTP mail data (smtp_data), SIP connection (sip), SMTP mail banner (smtp_banner), incomplete SMTP mail connection (smtp_incomplete), an outbound command denying access to Java applets (nojava), inbound data (data_in), outbound data (data_out), SQL*Net data fix up (sqlnet_fixup_data), inbound connection (conn_inbound), RPC connection (rpc), H.323 connection (h323), dump clean up connection (dump).

=============================================

HTH

Jon

Re: fwsm conn flags

orbanattila — Wed, 11 Jul 2007 11:01:20 GMT

Thanks a lot,

Attila