Cisco Cisco ASR 5000
ACS Rulebase Configuration Mode Commands
tcp packets-out-of-order ▀
Command Line Interface Reference, StarOS Release 18 ▄
777
tcp packets-out-of-order
This command allows you to configure processing of TCP packets that are out of order, while waiting for the earlier
packet(s) to arrive.
packet(s) to arrive.
Product
ACS
Privilege
Security Administrator, Administrator
Mode
Exec > ACS Configuration > Rulebase Configuration
active-charging service service_name > rulebase rulebase_name
Entering the above command sequence results in the following prompt:
[local]host_name(config-rule-base)#
Syntax
tcp packets-out-of-order { timeout timeout_duration | transmit [ after-reordering |
immediately ] }
immediately ] }
default tcp packets-out-of-order { timeout | transmit }
default
Configures this command with its default setting.
timeout
: 5000 milliseconds
transmit
:
immediately
timeout timeout_duration
Specifies the timeout duration for re-assembly of TCP out-of-order packets.
timeout_duration
is the timeout duration, in milliseconds, and must be an integer from 100 through
30000.
Default: 5000 milliseconds
Default: 5000 milliseconds
transmit [ after-reordering | immediately ]
Configures the TCP out-of-order segment behavior after buffering a copy.
after-reordering: Delivers the TCP out-of-order segments in-sequence to the ECS analyzer after all
packets are received and successfully reordered. The 'after-reordering' feature is doing this by
buffering out-of-order packets, and only releasing them after the missing out-of-order packets are
received (or after OOO timeout).
buffering out-of-order packets, and only releasing them after the missing out-of-order packets are
received (or after OOO timeout).
When the missing packet is received, complete deep packet inspection of all the packets and all
relevant in-line services is done, and then the last packet is forwarded (as the latest). If reordering is
not successful within the specified OOO timeout, all the subsequent received packets in that TCP
flow are forwarded without being passed through the analysers (except the L3/L4 analyzer). As a
consequence only L3/L4 rule matching will take place. If memory allocation fails or the received
packet is partial retransmitted data, the packet will also be forwarded immediately without being
passed through the protocol analyzers, except for the L3/L4 analyzers.
relevant in-line services is done, and then the last packet is forwarded (as the latest). If reordering is
not successful within the specified OOO timeout, all the subsequent received packets in that TCP
flow are forwarded without being passed through the analysers (except the L3/L4 analyzer). As a
consequence only L3/L4 rule matching will take place. If memory allocation fails or the received
packet is partial retransmitted data, the packet will also be forwarded immediately without being
passed through the protocol analyzers, except for the L3/L4 analyzers.