 Re: Use "fw monitor" to monitor traffic from 1 host.
there are many 'features' in fw monitor. Would recommend u reading fw monitor guide that can be downloaded from checkpoint. Lot of "tweaking and filtering" can be done. Basic what you ask for to see traffic from a host:
fw monitor -e 'accept src=x.x.x.x;' |