FW Monitor examples
From Tech-Wiki
Filtering based on a single Host: (no matter if it is the source or destination)
fw monitor -e "accept host(10.1.1.10);"
Filtering based on a Host pair"
fw monitor -e "accept host(10.1.1.10) or host(200.0.0.2);"
Filtering based on application:
fw monitor -e 'accept port(25);'
Strict filter:
fw monitor -e "src=10.1.1.10 and dst=200.1.1.11 and dport=80,accept;"