live monitoring of ping traffic

Question

I'm coming from a Cisco ASA background and am finding the monitoring/logging on the UTM to be a bit difficult. On the ASA I could look a the syslog and see live monitoring of ALL traffic. Then filter accordingly. The specific thing I'm looking for now is the ability to monitor pings (ICMP). Being as you have to set up ping in the firewall rules I'd think the firewall live log would be the place to look. Well I must be thinking wrong because it is showing neither successful nor non-successful ping traveling from the LAN to the WAN. 
 
 I've found that if I search the firewall log, using the search log files tab I can see ping info, but I need to see it live to perform debugging. Can someone provide me some direction please?

BAlfson · Accepted Answer

Another approach would be tcpdump at the command line: 
 tcpdump -ni eth0 icmp 
 Cheers - Bob

TimBoggs · Answer

If I remember correctly you have to sudo to Root after connecting as loginuser.

BAlfson · Answer

Years ago, Jack Daniel, one of the original Astaro gurus, suggested: 
 A Tcpdump Tutorial and Primer | danielmiessler.com http://danielmiessler.com/study/tcpdump/ 
 I started with that, but now if I have a specific thing I haven't done before, Google finds it faster than I can work through Miessler's excellent piece. 
 Cheers - Bob

BAlfson · Answer

As root at the command line, find the REF_ for the site-to-site tunnel named 'Portland': 
 cc get_object_by_name 'ipsec_connection' 'site_to_site' 'Portland'|grep 'ref' 
 Assume that that returns REF_IpsSitPortland . Now we can watch the traffic in the tunnel with: 
 espdump -n --conn REF_IpsSitPortland -vv 
 Cheers - Bob