Check Point排错工具(checking media presence)

网友投稿 387 2022-10-08


Check Point排错工具(checking media presence)

1.tcpdump 通常用来抓包处理经过网卡的交互包

[Expert@BJ-OFFICE-GW:0]# tcpdump -nni any host 10.158.1.100 -w /var/log/tcpdump20190821.captcpdump: WARNING: Promiscuous mode not supported on the "any" devicetcpdump: listening on any, link-type LINUX_SLL (Linux cooked), capture size 96 bytes

2.fw monitor 通常用来通过CP的虚连接来查看报文的交互过程,最常用

fw monitor -e "host (x.x.x.x) or host(y.y.y.y), accept;" -o /var/log/20190821.cap

[Expert@BJ-OFFICE-GW:0]# fw monitor -e "host (10.158.1.100) , accept;" -o /var/log/2019082102.capmonitor: getting filter (from command line)monitor: compilingmonitorfilter:Compiled OK.monitor: loadingmonitor: monitoring (control-C to stop)933 monitor: caught sig 2monitor: unloading

fw ctl zdebug 工具

# fw ctl zdebug + drop | grep 10.158.1.100> /var/log/2019082203.txt

[Expert@BJ-OFFICE-GW:0]# fw ctl zdebug + drop | grep 10.158.1.100> /var/log/2019082203.txt


版权声明:本文内容由网络用户投稿,版权归原作者所有,本站不拥有其著作权,亦不承担相应法律责任。如果您发现本站中有涉嫌抄袭或描述失实的内容,请联系我们jiasou666@gmail.com 处理,核实后本网站将在24小时内删除侵权内容。

上一篇:Check Point防火墙导入.csv格式的对象(checking media开不了机)
下一篇:Check Point防火墙使用命令批量创建对象和策略(checking media开不了机)
相关文章

 发表评论

暂时没有评论,来抢沙发吧~