CPview and Top-connections in R80.20

[Marek_Pietrulew]

Hi,

We recently upgraded from 80.10 to 80.20 and noticed that BW Top-Connections view has been removed from Cpview. There is only top-connections information in regards to CPU utilization.

Where can we quickly get BW top-connections info in R80.20 from cli?

Regards,

Marek

[Adam_Zidiker]

Hey Marek

I'm Adam from diagnostics (Owners of CPView)

Top-Connections by network was indeed removed on R80.20 due to change in GW architecture

We're working on adding it back

But I'm pretty sure you can view that and more from SmartConsole

Thanks

[miguel]

Hi Adam,

Is this still in the works? Any ETA?

What workaround(s) exist to get this functionality back any other way?

Thanks,

[PhoneBoy]

You should be able to see this with SmartView Monitor.
See: https://community.checkpoint.com/t5/Logging-and-Reporting/Bandwidth-Monitoring-of-Specific-Interface...

[Mauricio_Hurtad]

 will this command be appropriated to provide similar output as CPVIEW?

For RX traffic:

rtm monitor -f interface  interface,in -k src -v ab -k dst -k svc

For TX traffic:

rtm monitor -f interface Interface,in -k src -v ab -k dst -k svc

Both directions

rtm monitor -f interface  interface,both -k src -v ab -k dst -k svc

[Martin_Valenta]

Will it be back with r80.30 or with some jfa take? Without Monitoring blade license we cannot monitor it and previously it was easily visible in CPView..

[Dawei_Ye]

packet size was also removed .
Will it be added back too?

[Peter_Lyndley]

Will this be added back soon please ?

[PhoneBoy]

Just to update on this, it looks like we are planning to add this back into an R80.40 Jumbo in the near future.
This will be backported to R80.20/R80.30 jumbos as well.

[JozkoMrkvicka]

Why there is no support for IPv6 in CPview ?

[PhoneBoy]

Not sure what the plan is for adding IPv6 support in cpview.

[miguel]

Hi Phoneboy, and Adam,

Been two months since the last update. R80.40 Jumbo came out in March and doesn't have this fix.

Is there an ETA on a version with Top-connections back?

Also, in SmartView you get some weird results with source column resolving an IP or something to a weird string of characters that is definitely not a PTR lookup. Is there a way to turn off name resolution for SmartView so we can see the source IP?

[PhoneBoy · Accepted solution]

Just to update this thread: we've added this back to R80.40 JHF 69 and above.
Believe it will also be added to future R80.30 and R80.20 JHF releases. 

[Sigbjorn]

Any updates on this fix for R80.30?

[Sigbjorn]

Take 221:

PRJ-11045, PRJ-11046, ACCL-417

Gaia OS

UPDATE: CPView Network -> Top-Protocols and Network -> Top-Connections tabs were added back. Refer to sk167903.

Thanks! 😄

[S_E_]

Hi,

Is it really added back ?

On R80.40 Take 83 we can see top-connections again

On R80.40 Take 91 it is not visible and the sk167903 named it as fixed but provides a workaround with manual creating files and rebooting it.

So the question is: Does it come back 'out of the box' in a future HF ? Or will this be a workaround.

Thanks

Regards

[PhoneBoy]

We changed the implementation of it, which I assume is why those changes are needed to be made to simkern.conf.
I don't believe we typically touch those sorts of files when installing JHF, which is why it needs to be manually applied.

[moritz_r]

Hi,

someting is wrong with this feature.
I have followed the instruction in sk167903, only the total packet or Mbits output is there, but it shows now connection at all.

The gateway is running r80.40 with take 118 in an test vm environment. maybe that is the issue?

Best regards

Moritz

[PhoneBoy]

Recommend a TAC case here.

[maad-pul]

Hi,

What about "CPView Network -> Top-Protocols and Network -> Top-Connections" in VSX environment? 

Have this command been supported in VSX earlier? Any information about upcomming releases, not working in 80.40 JHF87.

Thanks,
Mattias

[Nandhakumar]

@PhoneBoy Still I could see this feature is not available in R81.10. Can you advise here? Do we need to follow any SK or something to enable this feature?

[Martin_Valenta]

it's still over SK and updating fwkern.conf unfortunately, somebody really don't want to have it enabled by default 😄

[shais]

Hi,

To enable the top connections / top protocol view in network tab, please follow sk167903.

Indeed its not enabled yet by default as this feature have lite performance impact and during our internal testing we found its not required by most customers.