Skip to main content
tomtux007
tomtux007
New Member
June 23, 2017
Question

Output of "diag sys session stat"

  • June 23, 2017
  • 2 replies
  • 11433 views

Hi

 

What does the field "NONE state" means in the output of "diag sys session stat"?

# diagnose sys session stat misc info:     session_count=88202 setup_rate=824 exp_count=425 clash=66742     memory_tension_drop=0 ephemeral=0/1114112 removeable=0 delete=0, flush=0, dev_down=0/0 TCP sessions:      429 in NONE state

 

Thank you.

Kind regards,

Tom   

    2 replies

    tomtux007
    tomtux007Author
    New Member
    August 24, 2017

    Hi

     

    No..., unfortunately not.

    Regards,

    Tom

    oheigl
    oheigl
    New Member
    August 24, 2017

    Hey guys,

     

    the NONE state is mentioned for all ICMP connections (because they don't have ESTABLISHED, SYN SENT or something like that).

    More details here:

    Copy & Paste of the relevant information: http://kb.fortinet.com/kb/documentLink.do?externalID=FD30042

     

    Proto_state field for ICMP (proto 1) There are no states for ICMP, it always show proto_state=00

     

    Kind regards

    emnoc
    emnoc
    New Member
    August 24, 2017

     It means exactly that , NONE  exist { tcp sessions }. The firewall and that fields are typically shows your TCP stated not ICMP so it should be populated with

     

     

    NONE

    ESTABLISHED state

    TIME_WAIT state

    etc

     

     

    It has nothing todo with icmp since ICMP is stateless the same for UDP

     

    Ken

    Terms & ConditionsAccessibility statement