Que ) How to monitor packet flow in Cyberoam Firewall ?

Ans : You can monitor packet flow from Cybroam CLI using the tcpdump command.

tcpdump is a packet capture tool that allows interception and capture of packets passing through a network interface, making it useful for understanding and troubleshooting network layer problems. It helps in monitoring packet flow coming on interface, response for each packet, packet drop, and ARP information. tcpdump prints out the headers of packets on a network interface that match the Boolean expression.

Command Description

Use tcpdump from Cyberoam Telnet Console or from Cyberoam CLI.

How to view traffic of the	tcpdump command		Example
specific host	tcpdump ‘host <ipaddress>‘		tcpdump ‗host 192.168.1.25‘
specific source host	tcpdump ‘src host <ipaddress>‘		tcpdump ‗src host 192.168.1.25‘
specific destination host	tcpdump ‘dst host <ipaddress>‘		tcpdump ‗dst host 192.168.1.100‘
specific network	tcpdump ‘net <network address>‘		tcpdump ‗net 192.168.1.0‘
specific source network	tcpdump ‘src net <network address>‘		tcpdump ‗src net 192.168.1.0‘
specific destination network	tcpdump ‘dst net <network address>‘		tcpdump ‗dst net 27.34.245.92‘
specific port	tcpdump ‘port <port-number>‘		tcpdump ‗port 21‘
specific source port	tcpdump ‘src port <port-number>‘		tcpdump ‗src port 21‘
specific destination port	tcpdump ‘dst port <port-number>‘		tcpdump ‗dst port 21‘
specific host for the particular port	tcpdump ‗host <ipaddress> and port <port-number>‘		tcpdump ‗host 192.168.1.138 and port 21‘
the specific host for all the ports except SSH	tcpdump ‗host <ipaddress> and port not <port-number>‘		tcpdump ‗host 192.168.1.138 and port not 22‘
specific protocol		tcpdump ‘proto ICMP‘                                  tcpdump ‘proto UDP‘                                  tcpdump ‘proto TCP‘                                  tcpdump ‗arp‘
paritcular interface	tcpdump interface <interface>		tcpdump interface PortB
specific port of a particular interface	tcpdump interface <interface> ‗port <port-number>‘		tcpdump interface PortB ‗port 21‘

Step 1 :

               

Step 2 :

               

Step 3 :

  

             

Step 4 :

      

         

Step 5 :

Step 6 :

Step 7 :

Step 8 :

      

         

Step 9 :

Step 10 :

Step 11 :