topic Re: Need to Verify traffic. in Advanced Threat Prevention Discussions

Need to Verify traffic.

shresth91 — Wed, 11 Jul 2018 21:15:01 GMT

Hello All,

I am using PA-820, i only have cli access to device. I will require to verify traffic from a particular source and destination on the device. Do we have any commands to do that ? May be something like packet tracer to get all the routes / ACL / NAT supporting.

Thanks in advance.

Re: Need to Verify traffic.

pulukas — Sat, 14 Jul 2018 17:06:09 GMT

On the cli for live traffic your best bet is problably show session. There are some examples of how to use this with filters for the source and destination address here.

https://live.paloaltonetworks.com/t5/Featured-Articles/Getting-Started-Flow-Basic/ta-p/72556

The general cli cheat sheet may also help.

https://www.paloaltonetworks.com/documentation/80/pan-os/cli-gsg/cli-cheat-sheets/cli-cheat-sheet-networking

Re: Need to Verify traffic.

Lora — Wed, 01 Aug 2018 22:30:21 GMT

@shresth91 you might be thinking of tcpdump here. Then you cn either export (if allowed) the pcap using scp to view in a tool of your choosing like wireshark for instance, or use the buil-in view-pcap. traceroute and ping are also available from the CLI too. Hope this helps! Best - Lora