On 3/9/06, Mark Senior <[EMAIL PROTECTED]> wrote:
>
>
> PIX has hit counts that increment once per complete session, ipfw counts
> packets and bytes (if you use state tracking, then the static rules only
> count one packet per complete session), Cisco router ACLs can obviously
> only count packets.  I don't recall off the top of my head what counts
> iptables implements.

And Check Point Firewalls may track time and bytes transferred if you
use "Account"
on the Track column for the rules you want to monitor.  Those keep counters and
of course that carries some overhead on the gateway, which may go
unnoticed if it
comes out that you have enough spare resources on your gateway machine...

> In fact, it would often help me out a lot, to be able to see a quick
> list of hitcounts, without the overhead of running a bunch of reports
> (after paying the extra thousands for reporter).  So, if someone comes
> up with a good answer, I'll be glad to hear it too.

Well, even if you don't have any reporter; if you have SmartView
Monitor there is
a view (under "Traffic, Top Security Rules) where you may monitor
those... depending
on what you are trying to do with these counters, this view may help - AFAIK you
may as well do this from the command line, using  the "rtm" command -
a legacy thing
from when this was called Real Time Monitor ;-) ...

Hope this helps a bit. good luck!

- Martín.

--
** Mi página web: http://gama.fime.uanl.mx/~mhoz/

** ¿Hoy qué haz hecho para ahorrar agua? - What have you done today to
save water? - O que você têm feito hoje para conservar a água?

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================

Reply via email to