what exactly is tcp-reuse and does it sends session closure traffic to the client and server?

minow — Sun, 19 Mar 2017 07:39:37 GMT

hey

we have some problem with old system that are beeign stuck after some tome it is working and on the logs we see the session end reason is "tcp-reuse" my questions are:

1) what should be happaning on the network flow for this end-reason log to apear

2) will the FW generate some traffic to the client and server to "close" their existing connection?

thanks

Re: what exactly is tcp-reuse and does it sends session closure traffic to the client and server?

nextgenhappines — Tue, 21 Mar 2017 00:07:22 GMT

#1 tcp-reuse means when the session finished the 3 or 4 ways FIN, and closing down the session (TCP Time Wait), during the TCP time wait, the same client and server is starting up a new session but using the same source and destination port as the session that just closed and couting down. That is when you will get the tcp-reuse.

https://www.paloaltonetworks.com/documentation/61/pan-os/newfeaturesguide/networking-features/session-end-reason-logging.html

A session is reused and the firewall closes the previous session.

https://www.paloaltonetworks.com/documentation/61/pan-os/pan-os/networking/session-settings-and-timeouts.html

See the sesssion about TCP Half Closed nad TCP Time Wait Timers.

#2 FW usually does not generate traffics to either side, unless you instructed it to.

topic what exactly is tcp-reuse and does it sends session closure traffic to the client and server? in General Topics

what exactly is tcp-reuse and does it sends session closure traffic to the client and server?

Re: what exactly is tcp-reuse and does it sends session closure traffic to the client and server?