show conn

[kunal-united]

Hi,

# sh conn

TCP out 192.168.173.163:38105 in 10.10.192.54:3096 idle 0:00:14 Bytes 504 flags UfFrRIOB

TCP out 192.168.173.81:54814 in 10.10.194.142:3091 idle 0:00:06 Bytes 1147425 flags UIOB

Does sh conn# command tell you whether source 192.168.173.163 is accessing 10.10.192.254 directly.

Or this command tells you that a NAT is happening.

I assume is that destination 10.10.192.254 is getting NATTED with some other ip in between and that this command doesnt give you the info.

Basically, I think it the source can see the NATTED ip as well as the direct ip also.

Please let me know

Thanks,

Kunal

[varrao]

Hi Kunal,

Show conn tell you the number of connections going through the ASA, it tell you the connection between the source and destination. If you want to know if a particular ip is getting natted or not, then use:

show xlate | in 10.10.192.254

This gives you whether the translation is being made or not.

Hope that helps.

Thanks,

Varun

[varrao]

Here's the command reference as well:

http://www.cisco.com/en/US/partner/docs/security/asa/asa82/command/reference/s2.html#wp1396672

Varun

[kunal-united]

Hi Varun,

I am not able to access the page.

Thanks

[varrao]

Try now:

http://www.cisco.com/en/US/customer/docs/security/asa/asa82/command/reference/s2.html#wp1396672