Firewall Connection Tracking

RouterOS General
1

I’m applying firewall rules to a bridge and all seems to work well.
Can anyone tell me what exactly the Connections tracking window is telling me.
My default TCP Established Timeout is set to 1d 00:00:00.
That seems too long. I just want to see how many active connections there are. What should I use?

Also on the list what does “U” mean in the far left column? What other indicators would I see in that column?

2

U = unreplied. Frinstance, if you send an ICMP echo request, the stateful firewall expects a ICMP reply. The U means there is an unreplied connetion.

I set my TCP established timeout to 1hour. Lower the better to a point. I find going much lower than an hour can cause some idle connections to drop. In some environments, even 5 minutes is fine.