12-04-2011 10:56 PM - edited 03-11-2019 02:59 PM
12-05-2011 01:43 AM
Hi,
yes there are no flags but looking at the ports you know it is SNMP and port 161 is the agent port for receiving requests
so it is 44.44.44.190.211 which initiated a SNMP request to 100.74.53.18.
But you're right we can't see in the output which initiated the connection as there is no flag because UDP is connectionless.
Regards.
Alain
12-05-2011 12:15 AM
Hi,
show conn protocol udp.
Regards.
Alain
12-05-2011 12:24 AM
Alain, how can you determine direction for this connection?
show conn protocol udp
UDP outside:44.44.190.211/36923 inside:100.74.53.18/161, flags -, idle 3s, uptime 3s, timeout 2m0s, bytes 871
There are no flags, which show originator of connection.
12-05-2011 01:43 AM
Hi,
yes there are no flags but looking at the ports you know it is SNMP and port 161 is the agent port for receiving requests
so it is 44.44.44.190.211 which initiated a SNMP request to 100.74.53.18.
But you're right we can't see in the output which initiated the connection as there is no flag because UDP is connectionless.
Regards.
Alain
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide