topic Active Devices via clish in Spark Firewall (SMB)

Active Devices via clish

Ave_Joe — Tue, 13 Apr 2021 17:49:50 GMT

Good day.

Is there an equivalent embedded GAIA clish command to display Active Devices as seen in the GAIA portal? See below.

If not, what would be the best way to grab this information from the appliance without having to use a web browser?

Re: Active Devices via clish

PhoneBoy — Thu, 15 Apr 2021 20:28:03 GMT

"arp" is probably the closest thing.

Re: Active Devices via clish

Ave_Joe — Thu, 15 Apr 2021 21:15:30 GMT

Thanks. I think we landed on just using the info in /var/dhcp.leases.XX file for this. No real sure what the GAIA webui is doing on the Active Devices screen but it's inline with what is in the dhcp.leases file.

We did find nmap in the /pfrm2.0/bin/ directory. After investigating using nmap it was decided that cat'ing the dhcp.leases.XX was a much simpler solution.

Re: Active Devices via clish

PhoneBoy — Fri, 16 Apr 2021 02:21:32 GMT

On the appliance I'm looking on, I'm not using DHCP because the appliance is running in bridge mode.
arp can also be run without going to expert mode 🙂

Re: Active Devices via clish

nmelay — Fri, 24 Nov 2023 18:25:44 GMT

Detected devices are conveniently stored in a SQLite database.

You can get the list using the following command in expert mode:

sqlite3 -column /flash/devices.db 'select name,ipAddr,macAddr,deviceOS,typeName,brand,model,ifName from devicesDb;'

Re: Active Devices via clish

shay1 — Wed, 08 Jan 2025 19:49:45 GMT

how can i add a field that will show me the interface ? i want to recognize all wireless active devices via cli

Re: Active Devices via clish

Olga_SMB — Thu, 09 Jan 2025 08:27:29 GMT

Hi Shay,
you can run in expert mode: hosts -f
grep the result according to interface name you are looking for.

Re: Active Devices via clish

shay1 — Thu, 09 Jan 2025 10:06:10 GMT

the command does not work on smb device - 1570

i tries in clish and in expert

Re: Active Devices via clish

nmelay2 — Mon, 10 Nov 2025 17:13:33 GMT

Shay,

The field for the firewall interface name is ifName; see the last column in the output from my command.
You can see all the available columns with :

sqlite3 -column -header /flash/devices.db 'select * from devicesDb;'

Also, starting with firmware R81.10.15, the database is now located in /flash/devices.db_persistent.