cancel
Showing results for 
Search instead for 
Did you mean: 
cyberz
Level 7
Report Inappropriate Content
Message 1 of 2

Current connections in one hour/day?

Hi


does anyone know a way read out the current connections in one hour or one day?


Thanks


Best Regards

Tim

1 Reply
sliedl
Level 14
Report Inappropriate Content
Message 2 of 2

Re: Current connections in one hour/day?

At the latest version (8.3.2P07) you can use the 'cf usage' command.  Do a 'man cf_usage' to read about it; a 'cf usage h' will show you the "quick help" screen for that command.

Usage:

cf usage show [type=<usage_type>] [<days|hours>=<period>]

Examples:

$> cf usage show type=traffic_by_network-applications days=4

$> cf usage show type=gti_by_source-ips hours=2

Here are the reports it can show (type=something_below):

traffic_by_network-applications

traffic_by_host-applications

traffic_by_network-application-categories

host-application-reputation malicious-host-application-reputation

executable malicious-executable traffic_by_ips-events

traffic_by_protocol-violations traffic_by_virus-events

traffic_by_users traffic_by_access-control-rules

traffic_by_source-countries traffic_by_destination-countries

traffic_by_source-ips traffic_by_destination-ips

gti_by_network-applications gti_by_users gti_by_source-countries

gti_by_destination-countries gti_by_source-ips

gti_by_destination-ips

More McAfee Tools to Help You
  • How-to: Endpoint Removal Tool
  • Support: Endpoint Security
  • Visit: Business Service Portal
  • More: Search Knowledge Articles
  • ePolicy Orchestrator Support

    • Download the new ePolicy Orchestrator (ePO) Support Center Extension which simplifies ePO management and provides support resources directly in the console. Learn more about ePO Support Center