fw stat does not show all interfaces By default, 'fw stat' will only list "active" interfaces, i.e. those interfaces that had traffic since the last time the policy was installed. The Architecture and Administration manual under "Command Line Interface" gives additional options you can pass to fw stat. If you want to list all interfaces, including inactive ones, use the '-inactive' flag. If you want full statistics for each interface, use the '-long' flag.
FireWall-1 only cares about physical interfaces, so any "virtual" or "aliased" interfaces will not show up in 'fw stat' or any sort of "get interface" mechanism within FireWall-1. One notable exception to this rule is VLANs in IPSO: each VLAN trunked into IPSO 3.5 or above will show up as a seperate interface in FireWall-1.
--
PhoneBoy - 23 Feb 2004
FAQForm FAQs.Class:
TroubleshootingFAQs FAQs.OS: FAQs.Version: