Empty PIX connection flags

[rahil.patel]

I have a huge amount of empty connection flags when sh conn detail | include x.x.x.x command is issued.

UDP outside: 64.246.x.x/53 inside: 172.16.x.x/1075 flags -

It's slowing down pix - any help appreciated.

[nkhawaja]

looks like lot of UDP connections just staying and not clearing out. What is the PIX code you are running. We had a bug in an earlier code.

Thanks

Nadeem

[rahil.patel]

6.3(3)

[scoclayton]

I don't have enough information to be sure but I suspect this is CSCec45748 - New DNS conns reset the idle timer of previous DNS conns. My suggestion would be to open a TAC case and request the latest 6.3(3) interim release to see if this resolves the issue. Sorry for the problems.

Scott