Вы находитесь на странице: 1из 1

What we need to obtain during the event: Captures all traffic to/frm gateway - we filter this later: fw monitor

-o /var/log/event.cap Lists all firewall drops involving the outlook client pc: fw ctl zdebug drop | grep <ip address of client pc running outlook> > zdebug.dro p from active cluster member We ran this command to specifically catch traffic on port 995 to/from the outloo k client: fw monitor -e 'accept tcpport(995) and host(10.3.0.200);' -o filename.whatever Captures all traffic from outlook client: fw monitor -e 'accept host(ip of outlook client);' -o client.cap

Вам также может понравиться