fwaccel synatk monitor

説明

fwaccel synatk monitor" と "fwaccel6 synatk monitor" コマンドは、Accelerated SYN Defender のステータスを表示します。

重要- すべてのインタフェースでモニタ（検出のみ）モードのAccelerated SYN Defenderを有効にするには、fwaccel synatk -mコマンドを実行する必要があります。

IPv4用構文

fwaccel synatk monitor

      [-p]

      [-p] -a

      [-p] -s

      [-p] -v

IPv6用構文

fwaccel6 synatk monitor

      [-p]

      [-p] -a

      [-p] -s

      [-p] -v

パラメータ

重要- これらのパラメータは1つだけ指定することができます。-a,-s, または-v.

パラメータ

説明

-p

各SecureXL閉じた セキュリティゲートウェイを通過するIPv4およびIPv6トラフィックを高速化するセキュリティゲートウェイ上のCheck Point製品。インスタンスのAccelerated SYN Defenderの状態を表示します（「PPAK ID: 0 」はHost Security Applianceです）。

[-p] -a

全インタフェース（SecureXLインスタンス毎）のAccelerated SYN Defenderの統計情報を表示します。

[-p] -s

攻撃状態を簡略化して表示します（SecureXLインスタンス毎）。

[-p] -v

攻撃状態を逐語的に表示します（SecureXLインスタンス毎）。

例

[Expert@MyGW:0]# fwaccel synatk monitor
+-----------------------------------------------------------------------------+
| SYN Defender status                                                         |
+-----------------------------------------------------------------------------+
| Configuration                                                      Disabled |
| Status                                                               Normal |
| Non established connections                                               0 |
| Global Threshold                                                      10000 |
| Interface Threshold                                                    5000 |
+-----------------------------------------------------------------------------+
| IF              | Topology | Enforce | State (sec)  | Non-established conns |
|                 |          |         |              | Peak      | Current   |
+-----------------------------------------------------------------------------+
| eth0            | External | Disable | Disable      | N/A       | N/A       |
| eth1            | Internal | Disable | Disable      | N/A       | N/A       |
+-----------------------------------------------------------------------------+
[Expert@MyGW:0]#
[Expert@MyGW:0]# fwaccel synatk -m
[Expert@MyGW:0]#
[Expert@MyGW:0]# fwaccel synatk monitor
+-----------------------------------------------------------------------------+
| SYN Defender status                                                         |
+-----------------------------------------------------------------------------+
| Configuration                                                    Monitoring |
| Status                                                               Normal |
| Non established connections                                               0 |
| Global Threshold                                                      10000 |
| Interface Threshold                                                    5000 |
+-----------------------------------------------------------------------------+
| IF              | Topology | Enforce | State (sec)  | Non-established conns |
|                 |          |         |              | Peak      | Current   |
+-----------------------------------------------------------------------------+
| eth0            | External | Detect  | Monitor      | 0         | 0         |
| eth1            | Internal | Detect  | Monitor      | 0         | 0         |
+-----------------------------------------------------------------------------+
[Expert@MyGW:0]#
 
[Expert@MyGW:0]# fwaccel synatk monitor -p
+-----------------------------------------------------------------------------+
| SYN Defender status                                                         |
+-----------------------------------------------------------------------------+
| Configuration                                                    Monitoring |
| Status                                                               Normal |
| Non established connections                                               0 |
| Global Threshold                                                      10000 |
| Interface Threshold                                                    5000 |
+-----------------------------------------------------------------------------+
| IF              | Topology | Enforce | State (sec)  | Non-established conns |
|                 |          |         |              | Peak      | Current   |
+-----------------------------------------------------------------------------+
| eth0            | External | Detect  | Monitor      | 0         | 0         |
| eth1            | Internal | Detect  | Monitor      | 0         | 0         |
+-----------------------------------------------------------------------------+
 
PPAK ID: 0
----------
+-----------------------------------------------------------------------------+
| SYN Defender status                                                         |
+-----------------------------------------------------------------------------+
| Configuration                                                    Monitoring |
| Status                                                               Normal |
| Non established connections                                               0 |
| Global Threshold                                                      10000 |
| Interface Threshold                                                    5000 |
+-----------------------------------------------------------------------------+
| IF              | Topology | Enforce | State (sec)  | Non-established conns |
|                 |          |         |              | Peak      | Current   |
+-----------------------------------------------------------------------------+
| eth0            | External | Detect  | Monitor      | 0         | 0         |
| eth1            | Internal | Detect  | Monitor      | 0         | 0         |
+-----------------------------------------------------------------------------+
[Expert@MyGW:0]#
 
[Expert@MyGW:0]# fwaccel synatk monitor -p -a
Global:
  status            attached
  nr_active                0
 
Firewall
----------
Per-interface:
                            eth0        eth1
                      ----------  ----------
topology                External    Internal
state                    Monitor     Monitor
syn ready                      0           0
syn active prev                0           0
syn active curr                0           0
active_score                   0           0
msec grace                     0           0
msec active                    0           0
sent cookies                   0           0
fail validations               0           0
succ validations               0           0
early packets                  0           0
no conn data                   0           0
bogus syn                      0           0
peak non-estab                 0           0
int sent cookies               0           0
int succ validations           0           0
msec interval                  0           0
 
PPAK ID: 0
----------
Per-interface:
                            eth0        eth1
                      ----------  ----------
topology                External    Internal
state                    Monitor     Monitor
syn ready                      0           0
syn active prev                0           0
syn active curr                0           0
active_score                   0           0
msec grace                     0           0
msec active                    0           0
sent cookies                   0           0
fail validations               0           0
succ validations               0           0
early packets                  0           0
no conn data                   0           0
bogus syn                      0           0
peak non-estab                 0           0
int sent cookies               0           0
int succ validations           0           0
msec interval                  0           0
[Expert@MyGW:0]#
 
[Expert@MyGW:0]# fwaccel synatk monitor -p -s
M,N,0,0
 
PPAK ID: 0
----------
M,N,0,0
[Expert@MyGW:0]#
 
[Expert@MyGW:0]# fwaccel synatk monitor -p -v
+-----------------------------------------------------------------------------+
| SYN Defender statistics                                                     |
+-----------------------------------------------------------------------------+
| Status                                                               Normal |
| Spoofed SYN/sec                                                           0 |
+-----------------------------------------------------------------------------+
 PPAK ID: 0
----------
+-----------------------------------------------------------------------------+
| SYN Defender statistics                                                     |
+-----------------------------------------------------------------------------+
| Status                                                               Normal |
| Spoofed SYN/sec                                                           0 |
+-----------------------------------------------------------------------------+
[Expert@MyGW:0]#