How can I see internet traffic?

[Network_M]

Sometimes our Internet is becoming very slow.

Every time we have to search and ask who is downloading big files and find them.

After that, internet is becoming normal.

How can I see online list of IP addresses and download rate in Checkpoint?

Thank you.

[G_W_Albrecht]

Can you please add the model / version / deployment of your GW ? Usually, such inmformation can be seen in CPview on the GAiA CLI.

[Network_M]

CP 5100 series, R80.10.

[G_W_Albrecht]

So did you try CPview yet ?

[Network_M]

Do you mean by entering TunnelMode in SmartView, and entering CPview?

[G_W_Albrecht]

I mean: connect to the GW CLI using ssh and issuing cpview...

[Network_M]

1. If I have 2 GWs, should I connect to each other seperately?

2. Is there any way not using CLI mode? Because I dont want to work in CLI mode.

[G_W_Albrecht]

You can also use SmartEvent Reports if you have it licensed. But CLI is much, much better...

[Network_M]

Can you explain steps please?

1. Log into the CP GW by any kind of client like Putty.

2. Type username and password.

2. Write "cpview" ?

[G_W_Albrecht]

Find the complete details here:sk101878: CPView Utility

[Network_M]

I have read it. I have no experience working with CLI, that is why I asked for steps.

And that is why I wanted detailed steps: switching into expert mode, writing cpview etc.

[G_W_Albrecht]

So you better go through theCheck Point For Beginners Lectures Series and take a Linux class...

[Timothy_Hall]

SSH/Putty into your active clustered firewall (checked with "cphaprob stat" command) and run cpview.  Use the arrow keys to navigate to Network...Top Connections which will show you the top 10 connections consuming the most bandwidth in real  time.

--

CheckMates Break Out Sessions Speaker

CPX 2019 Las Vegas & Vienna - Tuesday@13:30

[Michael_Zanczew]

When I issue the command cpview, I do not see "Navigate".  I have Overview, SysInfo, Traffic, I/S, and Software-Blades across the top.  I went through each one of them, and could not find it.  I too would like to be able to find the top connections.

[PhoneBoy]

According to the cpview SK, this feature was added in R77.30.

I personally am not seeing it in R80.20 (with the older kernel).

I haven't had a chance to check with other versions.

In the meanwhile, those of you who can't see this in cpview, it'd be helpful if you mentioned the version on this post and opened a TAC SR (share the # in private with me).

[Aroma2118]

https://community.checkpoint.com/message/39427-re-cpview-and-top-connections-in-r8020 

[Michael_Zanczew]

I am running 77.20, so I guess that makes sense why I do not see it.

[Gaurav_Pandya]

Hi,

If you have enabled Application & URL filtering blade and license to smart event then you can run a report for Top applications.

Smart reporter is also helpful.

[Network_M]

It can also be viewed in SmartView Monitor:

Logs and Monitor ---> Tunnel and User monitoring --> SmartView Monitor --> Traffic --> Top sources, top destinations, top connections, etc.