---
title: "Firewall diagnostics"
description: "Detailed insight into loaded aliases and their content. When an alias has Statistics enabled, it will show these too."
---

> Documentation Index
> Fetch the complete documentation index at: https://docs.ixolate.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Firewall diagnostics

## Aliases

Detailed insight into loaded aliases and their content. When an alias has **Statistics** enabled, it will show these too.

It's also possible to manually adjust the contents, using **Quick add address** or the delete button.

> **Note**
>
> When deleting items, keep in mind that the regular update process might put the address (or network) back in, since deletion isn't persistent.

> **Tip**
>
> Use "Find references" to check if an address would match any configured aliases, which is very practical for debugging purposes, since it will also check if an address fits a network (such as 10.0.0.2 fits in 10.0.0.0/24).

## Sessions

Utilises [pftop](https://www.freebsd.org/cgi/man.cgi?query=pftop) to offer a detailed view on the active sessions and their traffic counters.

The following fields are available in the grid:

------------------------------------------------------------------------

|     |                                                                       |
|-----|-----------------------------------------------------------------------|
| Dir | Direction (in `-\>` or out `or out`__) |

|  |  |
|----|----|
| LISTEN | Represents waiting for a connection request from any remote TCP and port. |
| SYN_SENT | Represents waiting for a matching connection request after having sent a connection request. |
| SYN_RCVD | Represents waiting for a confirming connection request acknowledgment after having both received and sent a connection request. |
| ESTABLISHED | Represents an open connection, data received can be delivered to the user. The normal state for the data transfer phase of the connection. |
| FIN_WAIT_1 | Represents waiting for a connection termination request from the remote TCP, or an acknowledgment of the connection termination request previously sent. |
| FIN_WAIT_2 | Represents waiting for a connection termination request from the remote TCP. |
| CLOSE_WAIT | Represents waiting for a connection termination request from the local user. |
| CLOSING | Represents waiting for a connection termination request acknowledgment from the remote TCP. |
| LAST_ACK | Represents waiting for an acknowledgment of the connection termination request previously sent to the remote TCP (which includes an acknowledgment of its connection termination request). |
| TIME_WAIT | Represents waiting for enough time to pass to be sure the remote TCP received the acknowledgment of its connection termination request. |
| CLOSED | Represents no connection state at all |

### List of available UDP/Other states (man [pf.conf(5)](https://www.freebsd.org/cgi/man.cgi?pf.conf(5)))

|  |  |
|----|----|
| NO_TRAFFIC | No traffic for this direction |
| SINGLE | The state if the source host sends more than one packet but the destination host has never sent one back. |
| MULTIPLE | The state if both hosts have sent packets. |

## Statistics

Various detailed statistics gathered from [pfctl](https://www.freebsd.org/cgi/man.cgi?query=pfctl), such as packet counters per interface, memory limits, configured timeouts and detailed active rules.

Source: https://docs.ixolate.com/diagnostics/firewall/index.mdx