FW Monitor examples

Back to Gaia

Filtering based on a single Host: (no matter if it is the source or destination)

fw monitor -e "accept host(10.1.1.10);" 

Filtering based on a Host pair"

fw monitor -e "accept host(10.1.1.10) or host(200.0.0.2) and net(10.0.0.0,8) and port(22);" 

Filtering based on application:

fw monitor -e 'accept port(25);'

Strict filter:

fw monitor -e "src=10.1.1.10 and dst=200.1.1.11 and dport=80,accept;"