Reply
L0 Member
Posts: 1
Registered: ‎07-11-2018

Need to Verify traffic.

Hello All,

 

I am using PA-820, i only have cli access to device. I will require to verify traffic from a particular source and destination on the device. Do we have any commands to do that ? May be something like packet tracer to get all the routes / ACL / NAT supporting.

 

Thanks in advance.

Highlighted
L7 Applicator
Posts: 1,331
Registered: ‎12-24-2012

Re: Need to Verify traffic.

On the cli for live traffic your best bet is problably show session.  There are some examples of how to use this with filters for the source and destination address here.

 

https://live.paloaltonetworks.com/t5/Featured-Articles/Getting-Started-Flow-Basic/ta-p/72556

 

The general cli cheat sheet may also help.

 

https://www.paloaltonetworks.com/documentation/80/pan-os/cli-gsg/cli-cheat-sheets/cli-cheat-sheet-ne...

 

Steve Puluka BSEET - IP Architect - DQE Communications (Metro Ethernet/ISP)
ACE PanOS 6; ACE PanOS 7; ASE 3.0; PSE 7.0 Foundations & Associate in Platform; Cyber Security; Data Center
L2 Linker
Posts: 19
Registered: ‎11-13-2015

Re: Need to Verify traffic.

@shresth91 you might be thinking of tcpdump here. Then you cn either export (if allowed) the pcap using scp to view in a tool of your choosing like wireshark for instance, or use the buil-in view-pcap.  traceroute and ping are also available from the CLI too.  Hope this helps!  Best - Lora

 

 

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!