- Posts: 3
- Thank you received: 0
PIX Connection Issues with RESET-O
18 years 2 months ago #16991
by Wayne
PIX Connection Issues with RESET-O was created by Wayne
Dear friends,
I got these logs in my pix 515E,
Sep 20 17:01:46 10.1.1.1 local6:info Sep 20 2006 17:01:14 fw01 : %PIX-6-302013: Built outbound TCP connection 208673 for Outside:172.16.1.1/23 (172.16.1.1/23) to Inside:172.30.1.2/1319 (172.30.1.2/1319)
Sep 20 17:01:47 10.1.1.1 local6:info Sep 20 2006 17:01:14 fw01 : %PIX-6-302014: Teardown TCP connection 208673 for Outside:172.16.1.1/23 to Inside:172.30.1.2/1319 duration 0:00:00 bytes 0 TCP Reset-O
The pix heared 'Reset' request from its interface Outside as I know, but who sent this request? is it nat related?
Could you help me? thanks!
I got these logs in my pix 515E,
Sep 20 17:01:46 10.1.1.1 local6:info Sep 20 2006 17:01:14 fw01 : %PIX-6-302013: Built outbound TCP connection 208673 for Outside:172.16.1.1/23 (172.16.1.1/23) to Inside:172.30.1.2/1319 (172.30.1.2/1319)
Sep 20 17:01:47 10.1.1.1 local6:info Sep 20 2006 17:01:14 fw01 : %PIX-6-302014: Teardown TCP connection 208673 for Outside:172.16.1.1/23 to Inside:172.30.1.2/1319 duration 0:00:00 bytes 0 TCP Reset-O
The pix heared 'Reset' request from its interface Outside as I know, but who sent this request? is it nat related?
Could you help me? thanks!
18 years 2 months ago #17036
by Smurf
Wayne Murphy
Firewall.cx Team Member
www.firewall.cx
Now working for a Security Company called Sec-1 Ltd in the UK, for any
Penetration Testing work visit www.sec-1.com or PM me for details.
Replied by Smurf on topic Re: PIX Connection Issues with RESET-O
This has got me intreged. Not been able to find out much about this so i will ask one of our distributors technical people what this does in fact mean. I have read somewhere that it doesn't necessarily mean anything its just that the logging hasn't kept up; what ever that means
Will try and find out for ya
Will try and find out for ya
Wayne Murphy
Firewall.cx Team Member
www.firewall.cx
Now working for a Security Company called Sec-1 Ltd in the UK, for any
Penetration Testing work visit www.sec-1.com or PM me for details.
18 years 2 months ago #17050
by Smurf
Wayne Murphy
Firewall.cx Team Member
www.firewall.cx
Now working for a Security Company called Sec-1 Ltd in the UK, for any
Penetration Testing work visit www.sec-1.com or PM me for details.
Replied by Smurf on topic Re: PIX Connection Issues with RESET-O
Apparently the TCP Reset-I means that the connection was reset from the client on the Inside and the Reset-O means that the connection was reset from a client on the outside.
Cheers
Wayne
Cheers
Wayne
Wayne Murphy
Firewall.cx Team Member
www.firewall.cx
Now working for a Security Company called Sec-1 Ltd in the UK, for any
Penetration Testing work visit www.sec-1.com or PM me for details.
Time to create page: 0.145 seconds