[logs] PIX/FWSM/ASA Connection IDs

Sanford Whitehouse sanford at lcsmith.com
Thu Jul 26 09:33:09 PDT 2007


I'm looking for the ID found in messages likes this one:

%PIX-6-302015: Built outbound TCP connection 1039875499 for 
outside:147.68.5.9/80 (147.68.5.9/80) to inside:10.1.60.44/2474 
(199.145.8.8/1883)

The connection ID is the 1039875499.  In some documentation it's 
referred to as an ID.  In others it's a number.

Thanks for the pointer to the Errordecoder.  Has it been around a while? 
  That might help to explain why Pix 8.0 message docs are absent.

Sanford

Mike Heiser wrote:
> If you're referring to the log message ID (such as ASA-6-302014) located 
> at the beginning of each log entry, you can look it up using the Cisco 
> Error Message Decoder Tool (login required).
> 
> http://www.cisco.com/cgi-bin/Support/Errordecoder/index.cgi
> 
> -Mike
> 
> On 7/26/07, *Sanford Whitehouse* <sanford at lcsmith.com 
> <mailto:sanford at lcsmith.com>> wrote:
> 
>     Hey,
> 
>     Does anyone have information on the characteristics of the Pix
>     connection IDs used in the build/teardown messages.  Specifically, I'm
>     looking for maximum value and whether or not it will always be numeric.
>         The interest is in versions 8.0 and 7.x.
> 
>     A pointer to documentation would be great.
> 
>     Thanks.
> 
>     Sanford
>     _______________________________________________
>     LogAnalysis mailing list
>     LogAnalysis at loganalysis.org <mailto:LogAnalysis at loganalysis.org>
>     http://www.loganalysis.org/mailman/listinfo/loganalysis
> 
> 


More information about the LogAnalysis mailing list