http://www.cpwiki.net/index.php?action=history&feed=atom&title=Useful_firewall_one_liners
Useful firewall one liners - Revision history
2026-04-29T09:55:49Z
Revision history for this page on the wiki
MediaWiki 1.21.10
http://www.cpwiki.net/index.php?title=Useful_firewall_one_liners&diff=162&oldid=prev
Nighthawk: Pushed from Themanclub.
2013-07-10T16:00:08Z
<p>Pushed from Themanclub.</p>
<p><b>New page</b></p><div><br />
== state sync sent/rec packets check ==<br />
fw ctl pstat | grep -A 1 "Sync p" | awk '{print $1,$2,$3}' <br />
<br />
fw ctl pstat | grep -A 1 "Sync packets sent" | grep total | awk '{print $3}' | awk -F , '{print $1}'<br />
<br />
fw ctl pstat | grep -A 1 "Sync packets received" | grep total | awk '{print $3}' | awk -F , '{print $1}'<br />
<br />
<br />
== VRRP ==<br />
get VRIDs<br />
clish -c "show vrrp interfaces" | grep VRID | tr -d '\n' ; echo ""<br />
<br />
== nokia validation ==<br />
<br />
'''Interfaces'''<br />
ssh -l username desthostname "/bin/ifconfig -a | grep broadcast | grep -v vrrpmac" | awk '{ i = NF-2; print $i }'<br />
<br />
'''Routes on ipso 6.x (remote command from jumpbox)'''<br />
ssh -l username firewall_name "netstat -rn | grep user | sort -n" | awk '{print $1, $4,$8}' <br />
'''Route on ipso 4.x'''<br />
ssh -l username firewall_name "netstat -rn | grep iCSU | sort -n" | awk '{print $1, $2,$6}' <br />
<br />
'''routes '''<br />
cat /config/active | grep "default:gateway:address"<br />
<br />
'''grab active interfaces only'''<br />
clish -c "show interfaces" | grep -B 1 On | grep Interface|awk '{print $3}'<br />
<br />
grab active interfaces and produce clish commands for '''logical interface''' stats<br />
clish -c "show interfaces" | grep -B 1 On | grep Interface | grep -v loop | grep -v Tunnel | awk '{print "clish -c \"show interface "$3, "statistics\" |grep -C 1 Bytes;"}'<br />
<br />
grab active interfaces and produce clish commands for '''physical interface''' stats unfiltered<br />
clish -c "show interfaces" | grep -B 1 Up | grep Interface | grep -v loop | grep -v Tunnel | awk '{print "clish -c \"show interface "$3, "statistics\" ;"}' <br />
error check<br />
clish -c "show interfaces" | grep -B 1 Up | grep Interface | grep -v loop | grep -v Tunnel | awk '{print "clish -c \"show interface "$3, "statistics\" |grep -A 3 Errors;"}'<br />
<br />
'''VRRP verfication'''<br />
vrrp pre-upgrade recon<br />
script that looks for any foreign vrrp advertisement<br />
<br />
???<br />
<br />
== MDS commands ==<br />
<br />
Customer list - useful for determining mdscmd startcma/stopcma first parameter (not given by mdsstat)<br />
mdsquerydb Customers<br />
'''<br />
list firewall logs, sorted with backslash for copy/paste into gzip command'''<br />
# '''ls -t *.log |awk '{print $1,"\\"}'|sort -n|more'''<br />
<br />
<br />
[[category:check point]]</div>
Nighthawk