cancel
Showing results for 
Search instead for 
Did you mean: 
cyberz
Level 7
Report Inappropriate Content
Message 1 of 2

Current connections in one hour/day?

Hi


does anyone know a way read out the current connections in one hour or one day?


Thanks


Best Regards

Tim

1 Reply
sliedl
Level 14
Report Inappropriate Content
Message 2 of 2

Re: Current connections in one hour/day?

At the latest version (8.3.2P07) you can use the 'cf usage' command.  Do a 'man cf_usage' to read about it; a 'cf usage h' will show you the "quick help" screen for that command.

Usage:

cf usage show [type=<usage_type>] [<days|hours>=<period>]

Examples:

$> cf usage show type=traffic_by_network-applications days=4

$> cf usage show type=gti_by_source-ips hours=2

Here are the reports it can show (type=something_below):

traffic_by_network-applications

traffic_by_host-applications

traffic_by_network-application-categories

host-application-reputation malicious-host-application-reputation

executable malicious-executable traffic_by_ips-events

traffic_by_protocol-violations traffic_by_virus-events

traffic_by_users traffic_by_access-control-rules

traffic_by_source-countries traffic_by_destination-countries

traffic_by_source-ips traffic_by_destination-ips

gti_by_network-applications gti_by_users gti_by_source-countries

gti_by_destination-countries gti_by_source-ips

gti_by_destination-ips

McAfee ePO Support Center Plug-in
Check out the new McAfee ePO Support Center. Simply access the ePO Software Manager and follow the instructions in the Product Guide for the most commonly used utilities, top known issues announcements, search the knowledgebase for product documentation, and server status and statistics – all from within ePO.