topic Re: CPview and Top-connections in R80.20 in Firewall and Security Management

CPview and Top-connections in R80.20

Aroma2118 — Tue, 22 Jun 2021 21:36:05 GMT

Hi,

We recently upgraded from 80.10 to 80.20 and noticed that BW Top-Connections view has been removed from Cpview. There is only top-connections information in regards to CPU utilization.

Where can we quickly get BW top-connections info in R80.20 from cli?

Regards,

Marek

Re: CPview and Top-connections in R80.20

Adam_Zidiker — Tue, 05 Feb 2019 09:56:53 GMT

Hey Marek

I'm Adam from diagnostics (Owners of CPView)

Top-Connections by network was indeed removed on R80.20 due to change in GW architecture

We're working on adding it back

But I'm pretty sure you can view that and more from SmartConsole

Thanks

Re: CPview and Top-connections in R80.20

miguel — Tue, 02 Apr 2019 15:39:48 GMT

Hi Adam,

Is this still in the works? Any ETA?

What workaround(s) exist to get this functionality back any other way?

Thanks,

Re: CPview and Top-connections in R80.20

PhoneBoy — Tue, 02 Apr 2019 22:10:34 GMT

You should be able to see this with SmartView Monitor.
See: https://community.checkpoint.com/t5/Logging-and-Reporting/Bandwidth-Monitoring-of-Specific-Interface/m-p/5870#M671

Re: CPview and Top-connections in R80.20

Mauricio_Hurtad — Mon, 24 Jun 2019 18:09:44 GMT

will this command be appropriated to provide similar output as CPVIEW?

For RX traffic:

rtm monitor -f interface interface,in -k src -v ab -k dst -k svc

For TX traffic:

rtm monitor -f interface Interface,in -k src -v ab -k dst -k svc

Both directions

rtm monitor -f interface interface,both -k src -v ab -k dst -k svc

Re: CPview and Top-connections in R80.20

Martin_Valenta — Thu, 18 Jul 2019 14:35:59 GMT

Will it be back with r80.30 or with some jfa take? Without Monitoring blade license we cannot monitor it and previously it was easily visible in CPView..

Re: CPview and Top-connections in R80.20

Dawei_Ye — Thu, 18 Jul 2019 17:12:20 GMT

packet size was also removed .
Will it be added back too?

Re: CPview and Top-connections in R80.20

Peter_Lyndley — Wed, 13 Nov 2019 18:03:44 GMT

Will this be added back soon please ?

Re: CPview and Top-connections in R80.20

PhoneBoy — Sat, 01 Feb 2020 19:28:49 GMT

Just to update on this, it looks like we are planning to add this back into an R80.40 Jumbo in the near future.
This will be backported to R80.20/R80.30 jumbos as well.

Re: CPview and Top-connections in R80.20

JozkoMrkvicka — Sun, 02 Feb 2020 06:59:34 GMT

Why there is no support for IPv6 in CPview ?

Re: CPview and Top-connections in R80.20

PhoneBoy — Sun, 02 Feb 2020 15:47:46 GMT

Not sure what the plan is for adding IPv6 support in cpview.

Re: CPview and Top-connections in R80.20

miguel — Mon, 06 Apr 2020 16:11:48 GMT

Hi Phoneboy, and Adam,

Been two months since the last update. R80.40 Jumbo came out in March and doesn't have this fix.

Is there an ETA on a version with Top-connections back?

Also, in SmartView you get some weird results with source column resolving an IP or something to a weird string of characters that is definitely not a PTR lookup. Is there a way to turn off name resolution for SmartView so we can see the source IP?

Re: CPview and Top-connections in R80.20

PhoneBoy — Thu, 06 Aug 2020 00:21:48 GMT

Just to update this thread: we've added this back to R80.40 JHF 69 and above.
Believe it will also be added to future R80.30 and R80.20 JHF releases.

Re: CPview and Top-connections in R80.20

Sigbjorn — Thu, 15 Oct 2020 18:55:25 GMT

Any updates on this fix for R80.30?

Re: CPview and Top-connections in R80.20

Sigbjorn — Wed, 21 Oct 2020 08:53:06 GMT

Take 221:

PRJ-11045,
PRJ-11046,
ACCL-417

Gaia OS

UPDATE: CPView Network -> Top-Protocols and Network -> Top-Connections tabs were added back. Refer to sk167903.

Thanks! 😄

Re: CPview and Top-connections in R80.20

maad-pul — Fri, 11 Dec 2020 09:44:20 GMT

Hi,

What about "CPView Network -> Top-Protocols and Network -> Top-Connections" in VSX environment?

Have this command been supported in VSX earlier? Any information about upcomming releases, not working in 80.40 JHF87.

Thanks,
Mattias

Re: CPview and Top-connections in R80.20

S_E_ — Mon, 22 Feb 2021 10:10:00 GMT

Hi,

Is it really added back ?

On R80.40 Take 83 we can see top-connections again

On R80.40 Take 91 it is not visible and the sk167903 named it as fixed but provides a workaround with manual creating files and rebooting it.

So the question is: Does it come back 'out of the box' in a future HF ? Or will this be a workaround.

Thanks

Regards

Re: CPview and Top-connections in R80.20

PhoneBoy — Tue, 23 Feb 2021 02:48:48 GMT

We changed the implementation of it, which I assume is why those changes are needed to be made to simkern.conf.
I don't believe we typically touch those sorts of files when installing JHF, which is why it needs to be manually applied.

Re: CPview and Top-connections in R80.20

moritz_r — Fri, 11 Jun 2021 14:33:21 GMT

Hi,

someting is wrong with this feature.
I have followed the instruction in sk167903, only the total packet or Mbits output is there, but it shows now connection at all.

The gateway is running r80.40 with take 118 in an test vm environment. maybe that is the issue?

Best regards

Moritz

Re: CPview and Top-connections in R80.20

PhoneBoy — Fri, 11 Jun 2021 23:16:44 GMT

Recommend a TAC case here.