topic Re: Timeout Countdown for defined applications in General Topics

Timeout Countdown for defined applications

johnm — Thu, 24 Oct 2013 15:59:27 GMT

Currently running a pair of active/passive 4020's and I have a question regarding timout values set on applications.

I have set up a new application with a TCP timeout value of 4 hours, is there any way of monitoring the count down from 4 hours to 0 for a given connection. i.e through the monitor tab.

I am trying to prove an application is definitely using the timeout value that has been set on the application, and would appreciate any help or advice.

Re: Timeout Countdown for defined applications

smccall — Thu, 24 Oct 2013 18:47:52 GMT

Would using the packet capture feature allow you to do this?

You could watch the recieve or transmit captures to see when the last packet was sent. You shouldn't see anything in the drop capture before 4 hours from the time the last packet went through.

We had to deal with a lot of timeout issues during our migration from Checkpoint to Palo. Reading packet captures was about the best way I found to monitor stuff.

The session browser should show you some time to live figures as well.