How many captures does the command “fw monitor -p all” take?
How many captures does the command “fw monitor -p all” take?
The 'fw monitor -p all' command captures packets at all 4 points of the VM modules, which are typically the points where the packet is inspected before and after passing through the engine, both inbound and outbound. This includes the incoming and outgoing packets at both the pre-inbound and post-outbound inspection points, thus covering all stages where the firewall module analyzes the traffic.
the question is a bit ambiguous and leaves the option of interpretation that could also be A, but reading the SK carefully, I lean more towards C. C is the best answer // Sk30583 What is FW Monitor? -pi position -pI position -po position -pO position -p all Inserts FW Monitor chain module at a specific position between Check Point kernel chains. //
It should be A. It captures packets at every chain module.
the answer is C