"Show Conn" in PIX

[gchui]

Dear,

When I issue the command "show conn" in pix. Here is my output:

TCP out 211.39.137.158:80 in 192.168.7.250:1036 idle 73:21:37 Bytes 919

TCP out 64.152.73.204:80 in 192.168.7.250:1034 idle 73:22:13 Bytes 1155

It indicates these two connections have been idle for about 73 hours as I have set the conn idle time to 0:0:0:. May I know how long (hrs) will these kind of connections last for? 99 hrs?

Gary

[fmeetz]

Since its still holding TCP connections not properly closed its not able to create new connections.

[aftermath]

You'll need to cofigure the CONN, to have an operative time limit.