FW Monitor examples

Monitoring and operational reference for FW Monitor examples.

Reference

Filtering based on a single Host: (no matter if it is the source or destination)

fw monitor -e "accept host(10.1.1.10);"

Filtering based on a Host pair and subnet

fw monitor -e "accept host(10.1.1.10) or host(10.1.1.2) and net(10.0.0.0,8) and port(22);"

Filtering based on application:

fw monitor -e 'accept port(25);'

Strict filter:

fw monitor -e "src=10.1.1.10 and dst=200.1.1.11 and dport=80,accept;"