<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic fw tab -t connections -z in General Topics</title>
    <link>https://community.checkpoint.com/t5/General-Topics/fw-tab-t-connections-z/m-p/262349#M44360</link>
    <description>&lt;P&gt;One of the most commonly overlooked features in the R81 + manual is the -z option. It provides a detailed overview of the connection table, including various functions and parameters. The following example clearly illustrates what this output looks like in practice.&lt;/P&gt;
&lt;P&gt;My personal favorite display is the one showing the transmitted KB/MB values, the number of packets, and the reason why a packet is not forwarded to SecureXL.&lt;/P&gt;
&lt;P&gt;#&amp;nbsp;&lt;STRONG&gt;fw tab -t connections -z&lt;/STRONG&gt;&lt;BR /&gt;&lt;BR /&gt;Here is an example output:&lt;BR /&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="AA_connections_34534534.png" style="width: 999px;"&gt;&lt;img src="https://community.checkpoint.com/t5/image/serverpage/image-id/32040i0FFBDCB6339C4C5F/image-size/large?v=v2&amp;amp;px=999" role="button" title="AA_connections_34534534.png" alt="AA_connections_34534534.png" /&gt;&lt;/span&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;/P&gt;</description>
    <pubDate>Mon, 10 Nov 2025 16:02:01 GMT</pubDate>
    <dc:creator>HeikoAnkenbrand</dc:creator>
    <dc:date>2025-11-10T16:02:01Z</dc:date>
    <item>
      <title>fw tab -t connections -z</title>
      <link>https://community.checkpoint.com/t5/General-Topics/fw-tab-t-connections-z/m-p/262349#M44360</link>
      <description>&lt;P&gt;One of the most commonly overlooked features in the R81 + manual is the -z option. It provides a detailed overview of the connection table, including various functions and parameters. The following example clearly illustrates what this output looks like in practice.&lt;/P&gt;
&lt;P&gt;My personal favorite display is the one showing the transmitted KB/MB values, the number of packets, and the reason why a packet is not forwarded to SecureXL.&lt;/P&gt;
&lt;P&gt;#&amp;nbsp;&lt;STRONG&gt;fw tab -t connections -z&lt;/STRONG&gt;&lt;BR /&gt;&lt;BR /&gt;Here is an example output:&lt;BR /&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="AA_connections_34534534.png" style="width: 999px;"&gt;&lt;img src="https://community.checkpoint.com/t5/image/serverpage/image-id/32040i0FFBDCB6339C4C5F/image-size/large?v=v2&amp;amp;px=999" role="button" title="AA_connections_34534534.png" alt="AA_connections_34534534.png" /&gt;&lt;/span&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;/P&gt;</description>
      <pubDate>Mon, 10 Nov 2025 16:02:01 GMT</pubDate>
      <guid>https://community.checkpoint.com/t5/General-Topics/fw-tab-t-connections-z/m-p/262349#M44360</guid>
      <dc:creator>HeikoAnkenbrand</dc:creator>
      <dc:date>2025-11-10T16:02:01Z</dc:date>
    </item>
    <item>
      <title>Re: fw tab -t connections -z</title>
      <link>https://community.checkpoint.com/t5/General-Topics/fw-tab-t-connections-z/m-p/262363#M44361</link>
      <description>&lt;P&gt;Great! Just tried it in my lab:&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&lt;BR /&gt;[Expert@CP-GW:0]# fw tab -t connections -z&lt;BR /&gt;localhost:&lt;BR /&gt;Dir Source IP SPort Destination IP DPort PR FW State Expires SXL ID Not Offloaded Reason Total Pkts Total Bytes Duration Last Seen&lt;BR /&gt;--- --------------- ----- --------------- ----- -- --------------- ------------- ------ -------------------------------- ---------- ----------- ---------- -----------&lt;BR /&gt;1 172.16.10.249 18192 172.16.10.252 65153 6 Link&lt;BR /&gt;1 172.16.10.249 18192 172.16.10.252 59755 6 Link&lt;BR /&gt;0 8.8.4.4 53 172.16.10.249 22088 17 Link&lt;BR /&gt;1 172.16.10.249 48077 8.8.4.4 53 17 UDP 39/40 N/A Local connection 49.52M 5.46GB 124h51m22s 1s&lt;BR /&gt;0 172.16.10.252 65153 172.16.10.249 18192 6 TCP Estab. 3575/3600 N/A Local incoming conn 337.32K 260.61MB 124h51m24s 25s&lt;BR /&gt;0 172.16.10.252 59755 172.16.10.249 18192 6 TCP Estab. 3511/3600 N/A Local incoming conn 10.69K 843.03KB 124h51m20s 1m29s&lt;BR /&gt;0 1.1.1.1 53 172.16.10.249 23367 6 Link&lt;BR /&gt;0 8.8.8.8 53 172.16.10.249 12659 17 Link&lt;BR /&gt;1 172.16.10.249 64492 1.1.1.1 53 6 TCP None 0/5 N/A Local connection 8 1.08KB 6s 5s&lt;BR /&gt;1 172.16.10.249 59887 172.16.10.252 257 6 TCP Estab. 3597/3600 N/A Local connection 6.39K 1.66MB 124h51m20s 3s&lt;BR /&gt;0 172.16.10.252 257 172.16.10.249 59887 6 Link&lt;BR /&gt;1 172.16.10.249 54053 8.8.8.8 53 17 UDP 38/40 N/A Local connection 49.57M 5.46GB 124h51m22s 1s&lt;BR /&gt;1 172.16.10.249 42985 172.16.10.252 257 6 TCP Estab. 3596/3600 N/A Local connection 294.06K 93.31MB 124h51m19s 2s&lt;BR /&gt;0 172.16.10.252 257 172.16.10.249 42985 6 Link&lt;BR /&gt;1 172.16.10.249 22 100.65.16.1 50325 6 Link&lt;BR /&gt;0 100.65.16.1 50325 172.16.10.249 22 6 TCP Estab. 3598/3600 N/A Local incoming conn 46 10.15KB 5s 0s&lt;BR /&gt;0 172.16.10.252 257 172.16.10.249 42679 6 Link&lt;BR /&gt;1 172.16.10.249 42679 172.16.10.252 257 6 TCP Estab. 2138/3600 N/A Local connection 539 41.12KB 124h52m4s 24m22s&lt;BR /&gt;1 172.16.10.249 63860 1.1.1.1 53 17 UDP 38/40 N/A Local connection 49.42M 5.47GB 124h51m22s 1s&lt;BR /&gt;0 1.1.1.1 53 172.16.10.249 53545 17 Link&lt;BR /&gt;20 slow-path connections out of 20 connections&lt;/P&gt;</description>
      <pubDate>Mon, 10 Nov 2025 18:32:33 GMT</pubDate>
      <guid>https://community.checkpoint.com/t5/General-Topics/fw-tab-t-connections-z/m-p/262363#M44361</guid>
      <dc:creator>the_rock</dc:creator>
      <dc:date>2025-11-10T18:32:33Z</dc:date>
    </item>
  </channel>
</rss>

