R80.30 - Exporting Rule Hit Counters without SMS access?

[Shurik]

Hey all,

Looking for a way to export rule hit counts on a large policy in R80.30 for an cleanup/upgrade project.

My access:

• SmartConsole: Access to view the policy (I can see the Hits column in the GUI).

• Gateway: Full SSH / Expert access.

• Management Server: No SSH or Management API access.

What I've tested:

• Actions > Export in SmartConsole leaves out the Hits column entirely.

• Copy/pasting grid rows into Excel doesn't work.

• Gateway CLI commands (cpstat fw, fw tab) show active connection stats, but no clean rule-by-rule tally.

Has anyone found a clean workaround or gateway script to pull rule hit numbers under these access constraints?

Thanks!

[PhoneBoy]

Hits weren't exported from SmartConsole until a much later release.
If you have API access, hits can be included as part of a show access-rulebase call (they aren't by default), even in R80.30.

The hitcount data is actually stored in a sqlite file on the gateway: $FWDIR/conf/hit_count_rules_table.sqlite
This is per: https://support.checkpoint.com/results/sk/sk79240