Palo Alto 10.0.6 5220 and 'show session all filter min-age'

psycoma1984 — Wed, 28 Jul 2021 20:06:25 GMT

Hello All,

Just wondering if 'show session all filter min-age 4000000' displays relevant information. We have around 3200 sessions in session table at average, but when I am trying to look for long-lived or even stuck(?) connections number using command above, it shows me around 200 connections. But if I take one of those 'old' ones number and view it via 'show session id X' - it will show that actual start date of this connection is... today.

Is there a discrepancy somewhere or am I missing something?

We are checking some weird issues and idea was that one of the sessions might be just stuck in a session table, causing appliance to consider that as a reuse and drop underlying traffic.

Thanks!

Re: Palo Alto 10.0.6 5220 and 'show session all filter min-age'

jdelio — Thu, 05 Aug 2021 17:05:54 GMT

IF I am hearing you correctly, there appears to be an "old" session, but when you go to get the details about it, it shows as still a current connection?

topic Palo Alto 10.0.6 5220 and 'show session all filter min-age' in General Topics

Palo Alto 10.0.6 5220 and 'show session all filter min-age'

Re: Palo Alto 10.0.6 5220 and 'show session all filter min-age'