[logs] PIX/FWSM/ASA Connection IDs
Sanford Whitehouse
sanford at lcsmith.com
Thu Jul 26 09:33:09 PDT 2007
I'm looking for the ID found in messages likes this one:
%PIX-6-302015: Built outbound TCP connection 1039875499 for
outside:147.68.5.9/80 (147.68.5.9/80) to inside:10.1.60.44/2474
(199.145.8.8/1883)
The connection ID is the 1039875499. In some documentation it's
referred to as an ID. In others it's a number.
Thanks for the pointer to the Errordecoder. Has it been around a while?
That might help to explain why Pix 8.0 message docs are absent.
Sanford
Mike Heiser wrote:
> If you're referring to the log message ID (such as ASA-6-302014) located
> at the beginning of each log entry, you can look it up using the Cisco
> Error Message Decoder Tool (login required).
>
> http://www.cisco.com/cgi-bin/Support/Errordecoder/index.cgi
>
> -Mike
>
> On 7/26/07, *Sanford Whitehouse* <sanford at lcsmith.com
> <mailto:sanford at lcsmith.com>> wrote:
>
> Hey,
>
> Does anyone have information on the characteristics of the Pix
> connection IDs used in the build/teardown messages. Specifically, I'm
> looking for maximum value and whether or not it will always be numeric.
> The interest is in versions 8.0 and 7.x.
>
> A pointer to documentation would be great.
>
> Thanks.
>
> Sanford
> _______________________________________________
> LogAnalysis mailing list
> LogAnalysis at loganalysis.org <mailto:LogAnalysis at loganalysis.org>
> http://www.loganalysis.org/mailman/listinfo/loganalysis
>
>
More information about the LogAnalysis
mailing list