topic Re: Port 0 in the session details in General Topics

Port 0 in the session details

Farzana — Wed, 14 Feb 2018 00:22:07 GMT

Hello,

Can someone please advise why our session list would have To/From port 0?

Re: Port 0 in the session details

kiwi — Wed, 14 Feb 2018 08:19:59 GMT

It's a PRED session (PREDICT). These sessions may be created with a 0 as source/destination IP/port, since that information may not be known yet. Packets that match the Predict sessions will then change to normal FLOW session.

Info here :

Palo-Alto-Networks-Firewall-Session-Overview

Cheers !

-Kiwi.

Re: Port 0 in the session details

DAYANAND — Fri, 30 Nov 2018 14:11:51 GMT

Hi Kiwi,

In Pan 8.0, when we try to run a scheduked report it shows that the destination port info for all sessions as 0. is this s bug, how to get the destination prt details... Any info will be helpful

Re: Port 0 in the session details

kiwi — Fri, 30 Nov 2018 14:30:47 GMT

Hi @DAYANAND,

I wasn't able to find an existing bug with said behaviour.

Are you seeing this only when running the scheduled report ?

I mean, does the regular traffic log also show port zero ? I'm guessing these aren't PREDICT sessions 🙂 ?

Which 8.0 version are you running exactly ?

Cheers !

-Kiwi.

Re: Port 0 in the session details

DAYANAND — Fri, 30 Nov 2018 14:58:32 GMT

Hi Kiwi,

Thanks for quick response. Its Pan 8.0.13.