I would ask if anyone can clarify the difference between a "TCP Reset-I" and a "TCP Reset-O" as seen
in cisco pix connection teardown logs.
Investigation on the cisco site turns up -I is inside,
-O is outside.
I have conflicting explanations.
The first is that a reset-I is a connection reset initiated by the pix to the tcp conversation parties, because it sees something wrong with the packet conversation. The reset-O is a connection reset by resets being received by the pix from the tcp conversation parties.
The second is that the -I and -O relate to notional inside and outside values on the interfaces, with a Reset -I or -O being stated according to whether a reset was received from the either host on the higher or lower interface.
Is either explanation correct ??
rgds
Martyn Beck
Telewest Communications