ZyXEL Communications ZyWALL 310 - 67.1.2 Report Command Examples; 67.1.3 Session Commands

Chapter 67 Reports and Reboot
ZyWALL Series CLI Reference Guide
572
67.1.2 Report Command Examples
The following commands start collecting data, display the traffic reports, and stop collecting data.
67.1.3 Session Commands
This table lists the commands to display the current sessions for debugging or statistical analysis.
Router# configure terminal
Router(config)# show report ge1 ip
No. IP Address User Amount Direction
===================================================================
1 192.168.1.4 admin 1273(bytes) Outgoing
2 192.168.1.4 admin 711(bytes) Incoming
Router(config)# show report ge1 service
No. Port Service Amount Direction
====================================================================
1 21 ftp 1273(bytes) Outgoing
2 21 ftp 711(bytes) Incoming
Router(config)# show report ge1 url
No. Hit URL
=====================================================================
1 1 140.114.79.60
Router(config)# show report status
Report status: on
Collection period: 0 days 0 hours 0 minutes 18 seconds
Table 329 Session Commands
COMMAND DESCRIPTION
show conn [user
{username|any|unknown}]
[service {service-
name|any|unknown}] [source
{ip|any}] [destination
{ip|any}] [begin <1..128000>]
[end <1..128000>] [dstcc
{country-code|any}] [srtcc
{country-code|any}] fastpath
Displays information about the selected sessions, a number of sessions (begin, end) or
about all sessions. You can look at all the active sessions or filter the information by user
name, service object, source IP, destination IP, country or session number(s).
any means all users, services, countries and IP addresses respectively.
unknown means unknown users and services respectively.
dstcc and srtcc mean source and destination country code.
country_code: 2-letter country-codes, such as TW, DE, or FR. Use show country-code
list to see the codes that represent countries.
fastpath Packets that pass through the Zyxel Device are inspected and either
allowed through or dropped based on the security policy. IPv4 Packets that match the
current connections in the fast path can pass through the Zyxel Device without
unnecessary security policy checks. This feature maximizes performance.
show report [interface_name]
https-url
Displays the most-visited Web sites accessed via SSL through the specified interface
and how many times each site has been visited.
show conn ip-traffic
destination
Displays information about traffic session sorted by the destination.
show conn ip-traffic source
Displays information about traffic session sorted by the source.
show conn status
Displays the number of active sessions.