I think i have some reading to do but thanks for pointing me in the right direction, Kevin
Main Topics
Browse All TopicsQ. What does Teardown TCP connection mean?
or Deny TCP (no connection)
or Built outbound TCP connection
or Built local-host inside
Its just that i'm new to firewalls and am trying to use the logging feature to troubleshoot connection problems. Any advice is welcome.
This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.
Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.
If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.
Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.
Access the answers to your technology questions today.
30-day free trial. Register in 60 seconds.
Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.

Try it out and discover for yourself.
30-day free trial. Register in 60 seconds.
Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.
Business Accounts
Answer for Membership
by: PeteLongPosted on 2009-02-23 at 14:18:57ID: 23716302
Log Message %PIX-6-302002: Teardown TCP connection for faddr IP_addr/port gaddr IP_addr/port laddr IP_addr/port
Explanation This is a connection-related message. This message is logged when a TCP connection is terminated. The duration and byte count for the session are reported. If the connection required authentication, the username is reported in the last field of the message. This message is used by the PIX Firewall Manager to generate reports.
Recommended Action None required.
http://www.cisco.com/en/US /docs/secu rity/pix/p ix43/syste m/message/ pixemsgs.h tml
Dent TCP does basically what it says on the tin :)
Built outbound TCP connection means than the TCP three way handshake had been established and data can flow http://www.pccitizen.com/t hreewayhan dshake.htm
Built local-host inside (Im guessing) that the sending client has sent a SYN Packet and the firewall has placed an entry in its embryonic state table.