1 Reply Latest reply on Aug 12, 2015 11:45 AM by sliedl

    Current connections in one hour/day?

    cyberz

      Hi


      does anyone know a way read out the current connections in one hour or one day?


      Thanks


      Best Regards

      Tim

        • 1. Re: Current connections in one hour/day?
          sliedl

          At the latest version (8.3.2P07) you can use the 'cf usage' command.  Do a 'man cf_usage' to read about it; a 'cf usage h' will show you the "quick help" screen for that command.

           

          Usage:

          cf usage show [type=<usage_type>] [<days|hours>=<period>]

           

          Examples:

          $> cf usage show type=traffic_by_network-applications days=4

          $> cf usage show type=gti_by_source-ips hours=2

           

           

          Here are the reports it can show (type=something_below):

           

          traffic_by_network-applications

          traffic_by_host-applications

          traffic_by_network-application-categories

          host-application-reputation malicious-host-application-reputation

          executable malicious-executable traffic_by_ips-events

          traffic_by_protocol-violations traffic_by_virus-events

          traffic_by_users traffic_by_access-control-rules

          traffic_by_source-countries traffic_by_destination-countries

          traffic_by_source-ips traffic_by_destination-ips

          gti_by_network-applications gti_by_users gti_by_source-countries

          gti_by_destination-countries gti_by_source-ips

          gti_by_destination-ips