[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [FW-1] ack out of state!
http://firewall-1.jimparker.co.uk/fw1/fw-1.0033.html
th_flag=10 does mean that an ACK packet caused the log entry.
Specifically, the connection referenced in the log entry is no longer in
the state table due to either a idle timeout or an RST or FIN being seen
by the firewall, and an ACK packet showed up after the connection was
removed from the state table. This is FW-1 doing it's job. :-)
Will Black wrote:
Ever seen this message, just started happening out of the blue.
th_flag 10 = ack out of state
th_flag 18 = push+ack out of state
It is killing the citrix connections, any thoughts would be welcome!
Will Black
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================