View of current active sessions

Started by Seimus, January 17, 2024, 03:49:27 PM

Previous topic - Next topic
Hi there,

I have a weird question either I missed it or I am just blind.

Is there a way to see in Zenarmor the current active sessions?

Because when Inspecting the Connections tab for example. This shows only sessions that are closed/finished. For example I had a session open for Application that uses QUIC, OPNsense was able to show me the session in state table as active. But it didn't appear in the Zenarmor until the session was not finished/closed.

Regards,
S.
Networking is love. You may hate it, but in the end, you always come back to it.

OPNSense HW
APU2D2 - deceased
N5105 - i226-V | Patriot 2x8G 3200 DDR4 | L 790 512G - VM HA(SOON)
N100   - i226-V | Crucial 16G  4800 DDR5 | S 980 500G - PROD

Hi,

Zenarmor just shows the ended sessions yet. It counts the packets and their volumes.

Quote from: sy on January 18, 2024, 05:09:04 PM
Hi,

Zenarmor just shows the ended sessions yet. It counts the packets and their volumes.

So as I thought, but Zenarmor must have somewhere a track of those currently active sessions because he is able to tell date/time and volume once its finished.

Wouldn't be possible to implemented within Zenarmor a feature that will show those currently active sessions?

This would be helpful for Tshoot as well to check what is active on the FW in case of suspicion for Zenarmors false negative.

Regards,
S.
Networking is love. You may hate it, but in the end, you always come back to it.

OPNSense HW
APU2D2 - deceased
N5105 - i226-V | Patriot 2x8G 3200 DDR4 | L 790 512G - VM HA(SOON)
N100   - i226-V | Crucial 16G  4800 DDR5 | S 980 500G - PROD