Fortinet Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
Lucascat
New Contributor III

Monitor/see session by IP

How can I monitor/see all session of a particular IP?

1 Solution
FortiAdam
Contributor II

Open a CLI session and type "diag sys session filter src x.x.x.x" and then type "diag sys session list".

 

More info here:  http://docs-legacy.fortin...ting_tools.173.11.html

View solution in original post

4 REPLIES 4
FortiAdam
Contributor II

Open a CLI session and type "diag sys session filter src x.x.x.x" and then type "diag sys session list".

 

More info here:  http://docs-legacy.fortin...ting_tools.173.11.html

Lucascat
New Contributor III

FortiAdam wrote:

Open a CLI session and type "diag sys session filter src x.x.x.x" and then type "diag sys session list".

 

More info here:  http://docs-legacy.fortin...ting_tools.173.11.html

Thank you Adam.

No way via GUI?

FortiAdam
Contributor II

There isn't anywhere to view actual session info per se but you might find the info under "Policy > Monitor" to be helpful.  Creating an extra policy to isolate the traffic you are interested in to get a more focused look at the info you are needing will help if necessary.  Otherwise you can configure your policy for logging all sessions and view the traffic logs.  

 

Those are probably your best options unless someone has another alternative? 

ede_pfau
Esteemed Contributor III

In FortiOS v5.2, use the FortiView menu entry. At first, it looks like a session table but you can filter and drill down into the sessions if you need. This replaces the Policy Monitor and the session widget with a much more powerful alternative. See the Release Notes for v5.2.3 and v5.2.4 for latest enhancements.


Ede

"Kernel panic: Aiee, killing interrupt handler!"