2 options that I am aware of:
1) the docs - http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_sw/v_63/cmdref/s.htm#wp1187542
2) issue a 'sh conn detail' -
ashes# sh conn det
0 in use, 0 most used
Flags: A - awaiting inside ACK to SYN, a - awaiting outside ACK to SYN,
B - initial SYN from outside, D - DNS, d - dump,
E - outside back connection, F - outside FIN, f - inside FIN,
G - group, H - H.323, I - inbound data, M - SMTP data,
m - SIP media, O - outbound data, P - inside back connection,
q - SQL*Net data, R - outside acknowledged FIN,
R - UDP RPC, r - inside acknowledged FIN, S - awaiting inside SYN,
s - awaiting outside SYN, T - SIP, t - SIP transient, U - up
ashes# sh ver
Cisco PIX Firewall Version 6.2(2)
Cisco PIX Device Manager Version 2.1(1)
In my opinion, the 'sh conn detail' is a better option as the developers will update this output as new connection flags are added so you can always be assured you have the most up to date content for your version.
Hope this helps.
Scott
