Monitoring and Configuration
Check Point 61000 Security System Getting Started Guide R75.40VS for 61000 | 83
Searching for a Connection (asg search)
Description
Use this command to:
•
Search for a connection.
•
Find out which SGM handles the connection (actively or as backup), and which Chassis.
Syntax
asg search
asg search <src> <dst> <dport> <ipp> <sport>
asg search -v
asg search -help
Parameter
Description
asg search
Run in interactive mode. In this mode you are asked to enter
the 5 tuples of the connection parameters. Each parameter can
be a wildcard. Press enter for wildcard.
asg search <src> <dst>
<dport> <ipp> <sport>
Run in command line. Each parameter can be replaced by * for
wildcard. If you specify only few parameters, the wildcard is
used for the others.
-v
Verbose mode
-help
Display usage
Example 1
asg search <source IP> <Destination IP>
asg search 10.33.86.2 10.33.87.101
Output
Lookup for conn: <10.33.86.2, *, 10.33.87.101, *, *>, may take few seconds...
<10.33.86.2, 2686, 10.33.87.101, 22, tcp> -> [1_01 A, 1_03 B, 2_01 B]
Legend:
A - Active SGM
B - Backup SGM
Comments
Searching for connections from
10.33.86.2
to
10.33.87.101
shows one SSH
connection:
<10.33.86.2, 2686, 10.33.87.101, 22, tcp>
This connection is handled by SGM 1 in Chassis 1. The connection has a backup on
SGM 3, and another backup in Chassis 2 on SGM 1.
Example 2
asg search 10.33.86.2 \* 8080 tcp
Output
Lookup for conn: <10.33.86.2, *, *, 8080, tcp>, may take few seconds...
<10.33.86.2, 49581, 194.29.36.43, 8080, tcp> -> [1_01 A, 1_07 B, 2_01 B]
<10.33.86.2, 49600, 194.29.36.43, 8080, tcp> -> [1_01 A, 1_07 B, 2_01 B]
<10.33.86.2, 49601, 194.29.36.43, 8080, tcp> -> [1_01 A, 1_07 B, 2_01 B]
Legend:
A - Active SGM
B - Backup SGM
