tcpdump at xg firewall

Question

Hello,

we want to capture the traffic at our xg fireall. We use tcpdump with some options we have used before at our sg firewall:

tcpdump host <ip-address> -i <interface>

But it doesn't work at usuale. At our xg firewall we can't use the parameter host, we can only capture the whole traffic.

Is there any possibility to capeture the traffic for one host?

Thanks for help

Jörg

This thread was automatically locked due to age.

JörgMittendorf · Accepted Answer

Luk, 
 
 thanks for the help. 
 
 At the asg-firewall we logged in with putty, and we can use standard linux commands. And now at the xg-firewall we have to write a string as a parameter. 
 When we know it, it works. 
 But why was it changed by sophos? 
 
 J&ouml;rg

lferrara · Answer

J&ouml;rg, 
 have a look at the CLI guide: http://docs.sophos.com/nsg/sophos-firewall/v15010/PDF/Sophos%20Firewall%20OS%20CLI%20Guide.pdf 
 page 54. 
 Regards,