On 3/9/06, Mark Senior <[EMAIL PROTECTED]> wrote: > > > PIX has hit counts that increment once per complete session, ipfw counts > packets and bytes (if you use state tracking, then the static rules only > count one packet per complete session), Cisco router ACLs can obviously > only count packets. I don't recall off the top of my head what counts > iptables implements.
And Check Point Firewalls may track time and bytes transferred if you use "Account" on the Track column for the rules you want to monitor. Those keep counters and of course that carries some overhead on the gateway, which may go unnoticed if it comes out that you have enough spare resources on your gateway machine... > In fact, it would often help me out a lot, to be able to see a quick > list of hitcounts, without the overhead of running a bunch of reports > (after paying the extra thousands for reporter). So, if someone comes > up with a good answer, I'll be glad to hear it too. Well, even if you don't have any reporter; if you have SmartView Monitor there is a view (under "Traffic, Top Security Rules) where you may monitor those... depending on what you are trying to do with these counters, this view may help - AFAIK you may as well do this from the command line, using the "rtm" command - a legacy thing from when this was called Real Time Monitor ;-) ... Hope this helps a bit. good luck! - Martín. -- ** Mi página web: http://gama.fime.uanl.mx/~mhoz/ ** ¿Hoy qué haz hecho para ahorrar agua? - What have you done today to save water? - O que você têm feito hoje para conservar a água? ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
