码迷,mamicode.com
首页 > 其他好文 > 详细

Check Point排错工具

时间:2020-03-29 23:53:39      阅读:54      评论:0      收藏:0      [点我收藏+]

标签:lis   accept   P20   linu   top   port   cep   com   office   

1.tcpdump 通常用来抓包处理经过网卡的交互包

[[email protected]:0]# tcpdump -nni any host 10.158.1.100 -w /var/log/tcpdump20190821.cap
tcpdump: WARNING: Promiscuous mode not supported on the "any" device
tcpdump: listening on any, link-type LINUX_SLL (Linux cooked), capture size 96 bytes

2.fw monitor 通常用来通过CP的虚连接来查看报文的交互过程,最常用

fw monitor -e "host (x.x.x.x) or host(y.y.y.y), accept;" -o /var/log/20190821.cap

[[email protected]:0]# fw monitor -e "host (10.158.1.100) , accept;" -o /var/log/2019082102.cap
monitor: getting filter (from command line)
monitor: compiling
monitorfilter:
Compiled OK.
monitor: loading
monitor: monitoring (control-C to stop)
933 monitor: caught sig 2
monitor: unloading

  1. fw ctl zdebug 工具

# fw ctl zdebug + drop | grep 10.158.1.100> /var/log/2019082203.txt

[[email protected]:0]# fw ctl zdebug + drop | grep 10.158.1.100> /var/log/2019082203.txt

Check Point排错工具

标签:lis   accept   P20   linu   top   port   cep   com   office   

原文地址:https://blog.51cto.com/14773580/2482877

(0)
(0)
   
举报
评论 一句话评论(0
登录后才能评论!
© 2014 mamicode.com 版权所有 京ICP备13008772号-2
迷上了代码!