local firewall objects database - Revision history

Nighthawk: /* commands to run locally on the firewall */

2015-01-21T17:09:00Z

‎commands to run locally on the firewall

2014-06-24T14:51:32Z

‎get logger and IP

2014-06-24T14:51:19Z

‎get logger and IP

2014-06-24T14:51:09Z

‎get logger and IP

2014-06-24T14:50:53Z

‎get logger and IP

2014-05-29T15:27:22Z

2014-03-27T17:06:48Z

2014-03-27T17:05:48Z

2014-03-27T17:04:11Z

2014-03-27T17:03:01Z

← Older revision		Revision as of 17:09, 21 January 2015
Line 23:		Line 23:
	# '''set NAME="''object_name_goes_here''"; grep -A 200 -r ": ($NAME" * $FWDIR/database/objects.C \| grep -i ipaddr'''		# '''set NAME="''object_name_goes_here''"; grep -A 200 -r ": ($NAME" * $FWDIR/database/objects.C \| grep -i ipaddr'''

		+	==get smartcenter or CMA info==
		+
		+	i=`grep -A 1 "Policy" $FWDIR/conf/masters \| grep -v Policy`; grep -E ": \($i\|ipaddr" $FWDIR/database/objects.C \| grep -iA1 "$i"\|tr -d "()":ipaddr \| awk '{print $1}'

	== get logger and IP ==		== get logger and IP ==

@@ Line 31: / Line 31: @@
 .168.1.10
---- note: bash is not the devault shell in ipso(csh is) ---
+--- note: bash is not the default shell in ipso(csh is) ---
 swithing to bash in ipso

@@ Line 31: / Line 31: @@
 .168.1.10
----note: bash is not the devault shell in ipso(csh is) ---
+--- note: bash is not the devault shell in ipso(csh is) ---
 swithing to bash in ipso

@@ Line 31: / Line 31: @@
 .168.1.10
- ---note: bash is not the devault shell in ipso(csh is) ---
+---note: bash is not the devault shell in ipso(csh is) ---
 swithing to bash in ipso

@@ Line 26: / Line 26: @@
 == get logger and IP ==
-this one works in bash on linux based firewalls (not ipso)
+this one works in bash on linux based firewalls or from bash in ipso
    [Expert@myfirewall]# '''i=`awk '/\[Log\]/{p=1;next}p &&/\[Alert\]/{p=0};p' $FWDIR/conf/masters`; grep -E ": \($i|ipaddr" $FWDIR/database/objects.C | grep -iA1 "$i"|tr -d "()":ipaddr | awk '{print $1}''''
    my_clm
 .168.1.10
 [[category:misc]]

← Older revision		Revision as of 15:27, 29 May 2014
Line 22:		Line 22:

	# '''set NAME="''object_name_goes_here''"; grep -A 200 -r ": ($NAME" * $FWDIR/database/objects.C \| grep -i ipaddr'''		# '''set NAME="''object_name_goes_here''"; grep -A 200 -r ": ($NAME" * $FWDIR/database/objects.C \| grep -i ipaddr'''
		+
		+
		+	== get logger and IP ==
		+
		+	this one works in bash on linux based firewalls (not ipso)
		+	[Expert@myfirewall]# '''i=`awk '/\[Log\]/{p=1;next}p &&/\[Alert\]/{p=0};p' $FWDIR/conf/masters`; grep -E ": \($i\|ipaddr" $FWDIR/database/objects.C \| grep -iA1 "$i"\|tr -d "()":ipaddr \| awk '{print $1}''''
		+	my_clm
		+	192.168.1.10
		+

	[[category:misc]]		[[category:misc]]

← Older revision		Revision as of 17:06, 27 March 2014
Line 2:		Line 2:


−	Object information such as IPs can be gathered locally on the firewall. This is useful for situations where you might cat $FWDIR/conf/masters to check the manager and logger configurations. ~~You~~ might what the associated IP address but not want to take the time to look it up on the GUI.	+	Object information such as IPs can be gathered locally on the firewall. This is useful for situations where you might cat $FWDIR/conf/masters to check the manager and logger configurations. The problem is all that file presents is object names and you might what the associated IP address... but not want to take the time to look it up on the GUI.

	The local firewall object information can be found in		The local firewall object information can be found in

← Older revision		Revision as of 17:05, 27 March 2014
Line 6:		Line 6:
	The local firewall object information can be found in		The local firewall object information can be found in
	$FWDIR/database/objects.C		$FWDIR/database/objects.C
		+
		+
		+	== commands to run locally on the firewall ==

@@ Line 14: / Line 14: @@
 a little cleaner command for bash on SPLAT or Gaia
-  # '''NAME="mysmartcenter"; grep -A 200 -r ": ($NAME" * $FWDIR/database/objects.C | grep -i ipaddr'''
+  # '''NAME="''object_name_goes_here''"; grep -A 200 -r ": ($NAME" * $FWDIR/database/objects.C | grep -i ipaddr'''
 ipso
-  # '''set NAME="mysmartcenter"; grep -A 200 -r ": ($NAME" * $FWDIR/database/objects.C | grep -i ipaddr'''
+  # '''set NAME="''object_name_goes_here''"; grep -A 200 -r ": ($NAME" * $FWDIR/database/objects.C | grep -i ipaddr'''
 [[category:misc]]

@@ Line 11: / Line 11: @@
   objects.C-                      :ipaddr (192.168.1.100)
-where ''mysmartcenter'' should be replaced with you object name of interest
+where ''mysmartcenter'' should be replaced with the object name of interest
 a little cleaner command for bash on SPLAT or Gaia