show conn details

[prashantrecon]

Hi

Can u anybody  explain what do mean by saA when show connection details command is excuted.

[varrao]

You can follow this command reference for the connection flags:

http://www.cisco.com/en/US/docs/security/asa/asa82/command/reference/s2.html#wp1396672

Hope that helps.

Thanks,

Varun

[prashantrecon]

Hi Varun,

I geeting the below output

tcp outside 10.17.x.x :3389 inside 172.18.x.x :3166  idle 0:00:00 bytes 0, flags saA

from the above output i think syn request is going to 10.17.x.x but there is no response from that server is it correct ?

[ajay chauhan]

Standard TCP protocol requires that the receiver respond to an initial SYN packet with a SYN ACK.

The flags saA indicate that we saw a SYN from an inside client and are awaiting the SYN ACK (sa) from the outside host

and then the ACK (A) from the inside host in response to the SYN ACK.

[prashantrecon]

so that is what i want to know request is going from inside but there is no response from outside (far end)

is it correct

[ajay chauhan]

thats correct.

[prashantrecon]

Thank you