[Last Call] Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 33335
  • Last Modified:

Teardown TCP connection

Q. What does Teardown TCP connection mean?

or Deny TCP (no connection)
or Built outbound TCP connection
or Built local-host inside

Its just that i'm new to firewalls and am trying to use the logging feature to troubleshoot connection problems.  Any advice is welcome.
0
ohareka
Asked:
ohareka
  • 2
1 Solution
 
Pete LongConsultantCommented:
Log Message %PIX-6-302002: Teardown TCP connection for faddr IP_addr/port gaddr IP_addr/port laddr IP_addr/port
Explanation    This is a connection-related message. This message is logged when a TCP connection is terminated. The duration and byte count for the session are reported. If the connection required authentication, the username is reported in the last field of the message. This message is used by the PIX Firewall Manager to generate reports.
Recommended Action    None required.
http://www.cisco.com/en/US/docs/security/pix/pix43/system/message/pixemsgs.html
 Dent TCP does basically what it says on the tin :)
 
Built outbound TCP connection means than the TCP three way handshake had been established and data can flow http://www.pccitizen.com/threewayhandshake.htm
 Built local-host inside (Im guessing) that the sending client has sent a SYN Packet and the firewall has placed an entry in its embryonic state table.
0
 
oharekaAuthor Commented:
I think i have some reading to do but thanks for pointing me in the right direction, Kevin
0
 
Pete LongConsultantCommented:
ThanQ
0

Featured Post

Free Tool: Subnet Calculator

The subnet calculator helps you design networks by taking an IP address and network mask and returning information such as network, broadcast address, and host range.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now