Steve is troubleshooting a connection problem with an internal application. If he knows the source
IP address is 192.168.4.125, how could he filter this traffic?
A.
Run fw monitor -e “accept src-ip=192.168.4.125;”
B.
Run fw monitor -e “accept src=192.168.4.125;”
C.
Run fw monitor -e “accept dst-ip=192.168.4.125;”
D.
Run fw monitor -e “accept ip=192.168.4.125;”
B
0
0
sk30583
https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk30583
Capture everything to/from host X or to/from host Y or to/from host Z:
[Expert@HostName]# fw monitor -e “host(x.x.x.x) or host(y.y.y.y) or host(z.z.z.z), accept;” -o /var/log/fw_mon.cap
[Expert@HostName]# fw monitor -e “((src=x.x.x.x or dst=x.x.x.x) or (src=y.y.y.y or dst=y.y.y.y) or (src=z.z.z.z or dst=z.z.z.z)), accept;” -o /var/log/fw_mon.cap
0
0
B. Run fw monitor -e “accept src=192.168.4.125;”
0
0