Skip to main content
BensonLEI
New Member
October 21, 2021
Solved

Cant view local-in-policy hit-count ?

  • October 21, 2021
  • 5 replies
  • 6910 views

Hi, guys,

 

Just would like to know if any way to view the local-in-policy hit count, thx a lot ?

 

I tried the normal method, but failed, as the following:

 

For viewing the hit count of  a normal security policy ( working ) :

Ftg100E # diag firewall iprope show 00100004 36

idx=36 pkts/bytes=485923/517732782 asic_pkts/asic_bytes=474029/508168477 nturbo_pkts/nturbo_bytes=0/0 flag=0x0  hit count:207 first:2020-03-30 16:17:19 last:2020-07-22 12:46:59 established session count:0 first est:2020-03-30 16:23:14 last est:2020-07-22 12:46:59

 

 

For viewing the hit count of the local-in-policy ( not working ? :(

Ftg100E # diag firewall iprope show 00100001 1 idx=1 pkts/bytes=0/0 asic_pkts/asic_bytes=0/0 nturbo_pkts/nturbo_bytes=0/0 flag=0x0

 

Ftg100E # diag firewall iprope show 00100001 2 idx=2 pkts/bytes=0/0 asic_pkts/asic_bytes=0/0 nturbo_pkts/nturbo_bytes=0/0 flag=0x0

 

 

Please advice.

 

With many thanks.

Benson

 

 

 

 

 

 

Best answer by darwin_FTNT

Just need to add a bit flag IPROPE_F_POL_STATISTIC to local-in policy struct it seems. I'll try to enable this bit and send a patch for verification.

5 replies

darwin_FTNT
Staff
Staff
October 27, 2021

Just need to add a bit flag IPROPE_F_POL_STATISTIC to local-in policy struct it seems. I'll try to enable this bit and send a patch for verification.

BensonLEI
BensonLEIAuthor
New Member
October 28, 2021

Thx so much for your advice and recommendation

darwin_FTNT
Staff
Staff
November 4, 2021

Tracked by mantis 0757046: Local-in policy hit count is not available in 'diag firewall iprope show'

It is already committed to FOS 7.x branch and available in build 0261.

Seems scheduled for FOS v6.4.9 as it is still in pending status (next official release is v6.4.8, current is v6.4.7).

Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.