Print

Please login or register.
1 Hour 1 Day 1 Week 1 Month Forever
Login with username, password and session length

[xavierbt]

Hi all,

Is possible to know all the connections established by the firewall in a fashion that you can know which connections are used ordered by ip ?

The gui is useless, and the console command: connections -show -num=20000 is useless too because you can get the output ordered by souce or destination ip.

From time to time and for short periods of time (some minutes) i get an unusual high number of network connections and the firewall looks useless to clarify me from/to ip are using this connections to know if the problem is an inside computer running some uncontrolled software, or the trouble came from outside (am i attacked?).

Any advice ?


regards

xavier

[danilovav]

As i know, no way to get such information without additional software
But, you can possibly prevent your issue - change (decrease) System > Advanced settings > Conn. Timeout Settings > TCP idle timeout. Usually i use value between 900 and 1800

[xavierbt]

Hi danilovav,

The problems is no timeout related. The connections are usually around 200-300 and increases to 2000-3000 connections for 5 to 10 minutes and restores to 200-300 in few minutes. During this peak period internet access gets slow, so i need to who (ip) is increasing firewall connections.

What additional software did you think about ?

[danilovav]

I didnt saw such software, but i've made some similar tool ,so probably it can be used
Next week (maybe more) i will go to biztrip, but after i will try to change my application...