How to show the active connection to a specific host

[andy_currigan]

I need to list the active connection to a specific hosts.

I try to take a look on sk65133 but it's a little bit confusing.

someone can post the cli sintax to list all the connection to or from a specific ip address on a gaia gateway?

[Jerry]

fw monitor -e "host(x.y.z.w) and host(a.b.c.d), accept;"

🙂

[Jerry · Accepted solution]

or

fwaccel conns | grep 192.168.1.1

or ...

tcpdump -nni any host a.b.c.d

[andy_currigan]

thank you

---

@Jerry wrote:
or

fwaccel conns | grep 192.168.1.1

or ...

tcpdump -nni any host a.b.c.d

---

[andy_currigan]

with fwaccel conns I get the following output

192.168.41.30 55359 172.16.168.14 443 6 ...A...S...... 1/5 5/1 0 0

How can I get the session time out?

[Jerry]

grep this with netstat -ni | grep 192.168.41.30 - and see TTL status (ESTAB/WAITING etc.). make a ping to that host then and try again, you'll see a difference 🙂

[CredID]

hi jerry,

I ping 8.8.8.8 from 192.168.1.166 and I run the command but I get the interface table not the sessions

gw01> netstat -ni | grep 192.168.1.166
Kernel Interface table
Iface MTU Met RX-OK RX-ERR RX-DRP RX-OVR TX-OK TX-ERR TX-DRP TX-OVR Flg
Sync 1500 0 109047670 0 0 0 185913667 0 0 0 BMRU
eth1 1500 0 2619089038 0 6385 6385 4877823972 0 0 0 BMRU
eth2 1500 0 2099220674 0 15669 15669 937946303 0 0 0 BMRU
eth3 1500 0 2935342554 0 28258 28258 1811907328 0 0 0 BMRU
eth4 1500 0 85802933 0 0 0 84968235 0 0 0 BMRU
eth4.200 1500 0 44997074 0 0 0 29860225 0 0 0 BMRU
eth4.201 1500 0 3850595 0 0 0 133790 0 0 0 BMRU
eth4.202 1500 0 2977084 0 0 0 81710 0 0 0 BMRU
eth4.203 1500 0 33247665 0 0 0 29904784 0 0 0 BMRU
lo 16436 0 57781100 0 0 0 57781100 0 0 0 LRU