topic Re: Historical connections in cpview in Firewall and Security Management

Historical connections in cpview

Kevin_Werner — Thu, 18 Apr 2019 20:01:32 GMT

Quick question regarding the cpview -t utility. If i look at cpview historical data it informs me that I am unable to view the top connections under the network tab with the following explanation: "Connections distribution summary (available when SecureXL is on)". I have securexl on, so I am wondering if it is possible to see top connections in a historical cpview search.

Thanks!

Re: Historical connections in cpview

PhoneBoy — Sat, 20 Apr 2019 11:53:00 GMT

What version of code are we talking about here?
If it's R80.20, I believe that's a known issue and is due to the significant changes made in SecureXL.
We do plan to add it back in later releases.

Re: Historical connections in cpview

Alexey — Sun, 21 Apr 2019 08:16:33 GMT

Hi Kevin,

When you open cpview normally in live mode without any flags do you see data in "Top-Connections" tab under "Network"?

The message "Connections distribution summary (available when SecureXL is on)" will appear in the header of the tab regardless if SecureXL is on or off, it's informative line to let you know that you will see data in the tab only when SecureXL is enable on the machine.

Important note: Not all data that you see in the live view of cpview will be saved to history. This is why you will see "N/A" in the tabs that for them data is not saved due to size limitation of history on the machine. "Top-Connections" are not saved in the history of cpview hence you want see any data when you launch "cpview -t".

Re: Historical connections in cpview

Kevin_Werner — Mon, 22 Apr 2019 12:39:07 GMT

Thanks Dameon, currently running 80.10 take 169 across most of the environment, but have a couple gateways running 144, all with the same issue.

Re: Historical connections in cpview

Kevin_Werner — Mon, 22 Apr 2019 12:44:45 GMT

Thanks Alexey,

Without flags I am able to see top connections in a standard cpview live command.

The second part of your response most likely answers my question - is there any way to save top connections in cpview history?

Re: Historical connections in cpview

Alexey — Tue, 23 Apr 2019 07:59:44 GMT

Currently we have some limitation regarding size of history DB, maybe in the future we will add more statistics to the history including Top-Connections.

Re: Historical connections in cpview

Peter_Lyndley — Tue, 23 Apr 2019 08:31:10 GMT

The Top Connections is probably the most useful CPview screen for troubleshooting, therefore I would suggest the history of this screen is probably the top priority in adding it into the history where possible.

thanks

Peter

Re: Historical connections in cpview

Alexey — Tue, 23 Apr 2019 09:32:48 GMT

We will consider your request for next releases, thanks for your feedback!