CPUG

The Check Point User Group

A Resource For The Check Point Community.  Fast.  Useful.  Independent.

1. CCSA/CCSE One-Week Dual-Certification Training Course with CPUG in San Francisco!
    Courses Starting 12/8, (2009) 1/19, 2/9, 3/9, 4/6, 5/4, 6/8, 7/6, 8/3.
2. Join Us On LinkedIn - We now have a CPUG group.


Go Back   CPUG: The Check Point User Group > Check Point Firewall-1/VPN-1 And Related Products > SmartView Monitor/SmartView Status
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 2007-01-21
Junior Member
 
Join Date: 2006-10-06
Posts: 11
Rep Power: 0
zn-me has an average reputation (10+)
Default Smartview Monitor graph

Hi All,

I m using Smartview Monitor. I ran a report for Inbound traffic on Checkpoint External interface (WAN).

I notice high HTTP traffic but what does "All Traffic" (represent as grey line in graph) means?

Thank you.
Attached Images
File Type: jpg graph.JPG (61.0 KB, 145 views)
Reply With Quote
  #2 (permalink)  
Old 2007-01-21
Senior Member
 
Join Date: 2005-08-29
Location: Upstate NY
Posts: 1,670
Rep Power: 5
chillyjim has an average reputation (10+)
Send a message via AIM to chillyjim Send a message via Skype™ to chillyjim
Default Re: Smartview Monitor graph

Quote:
Originally Posted by zn-me View Post
Hi All,

I m using Smartview Monitor. I ran a report for Inbound traffic on Checkpoint External interface (WAN).

I notice high HTTP traffic but what does "All Traffic" (represent as grey line in graph) means?

Thank you.
Just what it says, all the traffic going through the firewall/interface
Reply With Quote
  #3 (permalink)  
Old 2007-01-21
Junior Member
 
Join Date: 2006-10-06
Posts: 11
Rep Power: 0
zn-me has an average reputation (10+)
Default Re: Smartview Monitor graph

Hi chillyjim,

Goodness.. you replied to both of my threads today... thanks.

Back to my question, that is what I suspect aslo.. but I could not explain why there was a network spike for all traffic between Jan 06 and 07 but http traffic is not consistent with it.

What do you think?
Reply With Quote
  #4 (permalink)  
Old 2007-01-22
Senior Member
 
Join Date: 2005-08-29
Location: Upstate NY
Posts: 1,670
Rep Power: 5
chillyjim has an average reputation (10+)
Send a message via AIM to chillyjim Send a message via Skype™ to chillyjim
Default Re: Smartview Monitor graph

Try running the monitor filtering for just that day (I think you can do this, but you might need reporter, I don't have a client handy to check). The traffic is being generated by a protocol you don't normally see on your network is all I can tell.
Reply With Quote
  #5 (permalink)  
Old 2007-01-23
Senior Member
 
Join Date: 2006-07-28
Location: New Zealand
Posts: 857
Rep Power: 3
northlandboy has an average reputation (10+)
Default Re: Smartview Monitor graph

If that's an Internet-facing system, then most likely cause is that it was just random Internet-noise - e.g. worm-affected system, or perhaps Windows messenger spam.

Look in your logs.
Reply With Quote
  #6 (permalink)  
Old 2007-01-23
Senior Member
 
Join Date: 2005-08-29
Location: Upstate NY
Posts: 1,670
Rep Power: 5
chillyjim has an average reputation (10+)
Send a message via AIM to chillyjim Send a message via Skype™ to chillyjim
Default Re: Smartview Monitor graph

Duh...Must not post replies after a 4 hour drive and a long day. Brain dosn't work too well :)
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


All times are GMT -7. The time now is 11:08.


Powered by vBulletin® Version 3.7.4
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.2.0