To close all connections with the source interface If3:
gw-world:/> conn -close -srciface=If3
The -verbose Option
When the -verbose option is used, the connections command adds another line of output for each
connection that is prefixed with ...term:. This line shows the changes, if any, made by
NetDefendOS in the interface or IP or port number as the connection traverses the firewall. For
example, consider this output showing a single connection:
gw-world:/> conn -verbose
State Proto Source Destination Tmout
-------- ------- --------------------------- ----------------------- ------
TCP_OPEN TCP If1:10.4.0.16:60848 If3:192.168.96.82:80 262119
...term: If1:192.168.96.1:39097 If3:192.168.96.82:80 262119
Here, the original connection is subject to a NAT IP rule which transforms If1:10.4.0.16:60848 into
If1:192.168.96.1:39097. The destination remains the same but the source IP and port has been
changed by NetDefendOS. For this example, a private IP address has been used for illustration
but 192.168.96.1 would typically be a public IP address.
A complete list of all options for the connections command can be found in the separate CLI
Reference Guide.
2.6.5. The dconsole Command
The next step is to use the CLI command:
gw-world:/> dconsole
This can be abbreviated to:
gw-world:/> dcon
The dconsole command provides a list of important events that have occurred during
NetDefendOS operation and can help to establish the date, time and nature of events leading up
to a serious problem occurring. The output might look similar like the following:
Showing diagnose entries since 2008-05-22:
2008-06-21 11:54:58 Start (11.04.01-0:131)
2008-06-21 11:56:16 Stop (RECONFIGURE)
2008-06-21 11:56:21 Start (11.04.01-0:131)
2008-06-21 11:57:29 Stop (RECONFIGURE)
2008-06-21 11:59:31 Start (11.04.01-0:131)
2008-06-21 11:59:49 Stop (NORMAL)
"
"
Output from dconsole can include a dump of the system memory in the case of serious runtime
errors. Such a dump will look similar to the following:
'
'
Reason: Exception 'DataAbort' occurred at address 0x7aaea34
Generation date/time: 2008-07-04 14:23:56 List of loaded PE-modules:
fwloader(1.07.04): BA:0x00100000, EP:0x00101028, SS:0x0, IS:0xe7000
fwcore(811.04.01-2336): BA:0x07761038, EP:0x0007c630 Register dump:
----------------------------------------------------
r0 : 0xe1a0003c, r1 : 0x07c685dc, r2 : 0x00000004, r3 : 0x50013700,
r4 : 0x06cb2d04, r5 : 0x0753a740, r6 : 0x050ce1f8, r7 : 0x00000000,
r8 : 0x0753a79c, r9 : 0x050ce1f8, r10: 0x00000000, r11: 0x0775ff34,
Chapter 2: Management and Maintenance
125
To Next Page
Loading...
