Command List

The following are the top level commands:

Note

Each top level command may have several extended commands or sub-commands.

check

Note

This feature requires the Plixer FlowPro Defender license.

Function

Verifies different settings and configurations on the Plixer FlowPro appliance.

Syntax

  • check replist - Checks the ability for the Plixer FlowPro to reach nba.plixer.com to download the reputation lists. If this appliance does not have access to the internet, contact Plixer Technical Support for help.

clear

Warning

These commands will alter Plixer FlowPro’s functions and should be used with caution.

Note

This feature requires the Plixer FlowPro Defender license.

Function

Cleans up or removes data from a system.

Syntax

  • clear domainlist <domain_list> - Removes a domain list from the system. Use with caution. Use the show domainlist command to list all active domain lists.

disable

Function

Disables settings.

Syntax

  • disable apm <interface> <apmMode> - Disables either monitoring of Latency, VOIP or both on an interface. The specified interface must be active. The valid <apmMode> options are: voip, latency, or both. This feature requires the Plixer FlowPro APM license. To display a list of currently enabled interfaces, use the show configuration command.

  • disable defender <interface> - Disables DNS monitoring on an interface. The specified interface must be active. This feature requires the Plixer FlowPro Defender license. To display a list of currently enabled interfaces, use the show configuration command.

  • disable domainlist <domain_list> - Disables a custom domain reputation list. The disabled domain list will not be removed and can be re-enabled using the enable domainlist command. This feature requires the Plixer FlowPro Defender license.

  • disable domainReputationList - Disables checking against the domain reputation lists configured on the system. This feature requires the Plixer FlowPro Defender license. To display the available domain lists, use the show domainlist command.

  • disable erspan <interface> - Disables traffic monitoring on an interface. To display a list of currently enabled interfaces, use the show configuration command.

  • disable http_mon - Disables the HTTP monitoring. This feature requires the Plixer FlowPro Defender license.

  • disable trackProcessMetrics - Disables Plixer FlowPro process metrics.

edit

Function

Edits the Plixer FlowPro configuration files.

Syntax

  • edit domainlist <domain_list> - Edits a custom domain reputation list. The name specified in <domain_list> will create a new list with that name if none exists already. The custom domain reputation list created must contain one domain per line and each domain must contain a two or three layer domain (2LD/3LD). Domain names that do not contain 2 or 3 layers are ignored. This feature requires the Plixer FlowPro Defender license.

  • edit license - Opens the plixer.ini file where the license key is stored. The plixer.ini file also stores the Plixer FlowPro configuration information. After editing the plixer.ini file, Plixer FlowPro will restart services to load the changes made.

  • edit plixer.ini - Opens the plixer.ini file for edit. The plixer.ini file stores the Plixer FlowPro configuration information. After editing the plixer.ini file, Plixer FlowPro will restart services to load the changes made.

enable

Function

Enables monitoring options. All settings can be edited in the configuration file using the edit plixer.ini command.

Syntax

  • enable apm <interface> <apmMode> - Enables the monitoring of Latency, VOIP, or both on an interface. The specified interface must be active. The valid <apmModes> options are: voip, latency, or both. This feature requires the Plixer FlowPro APM license. To display a list of available monitoring interfaces, use the show interfaces command.

  • enable defender <interface> - Enables DNS monitoring on an interface. The specified interface must be active. This feature requires the Plixer FlowPro Defender license. To display a list of available monitoring interfaces, use the show interfaces command.

  • enable domainlist <domain_list> - Enables a custom domain reputation list. Custom user-defined reputation lists can be created to supplement the known compromised domain list provided by Plixer. To create a new list, use the edit domainlist <domain_list_name> command.

  • enable domainReputationList - Enables Plixer FlowPro to download an updated list of known compromised domains. This list will be periodically downloaded from nba.plixer.com. To verify access to the list, use the check replist command.

  • enable erspan <interface> <ipaddress/cidr> <gateway> <peerIPaddress> - Configures a monitor interface to receive traffic from an ERSPAN/GRE tunnel. This configuration supports all types of GRE tunnels. The following parameters are required:

    • <interface> - Monitors the ERSPAN/GRE tunnel traffic. This interface must be one of the monitoring interfaces displayed by the show interfaces command.

    • <interface><ipaddress/cidr> - The IP address dedicated to the ERSPAN/GRE tunnel. This IP must be routable from the monitoring interface to the network device configured to send ERSPAN/GRE. Both the IP address and CIDR are required, which must be unique to this interface.

    • <interface><gateway> - Used by the monitoring interface to create a route to keep the outgoing traffic from the ERSPAN/GRE tunnel localized to the monitoring interface.

    • <interface><peerIPaddress> - The external address of the network device configured to send ERSPAN/GRE. If the device is a VMware VDS, enter the IP address of the VMware host.

Note

For instructions on how to configure the ERSPAN/GRE device, refer to the ERSPAN configuration section.

  • enable flowpro <interface> - Enables traffic monitoring on an interface. The interface must be active. To display a list of available monitoring interfaces, use the show interfaces command.

  • enable http_mon - Keeps track of all domains accessed with HTTP. The list of currently active domains is saved for the number of seconds set by the set activeDomainResendSeconds command.

  • enable trackProcessMetrics - Sends process information to your collector about the Plixer FlowPro processes. Information about CPU and memory usage will be sent to the collector.

service

Function

Controls the Plixer FlowPro service daemon.

Syntax

  • service flowpro <start|stop|restart>

set

Function

Changes various settings for the Plixer FlowPro appliance.

Syntax

  • set activeDomainResendSeconds <seconds> - Sets the number of seconds to resend the active domain list to your collector. The active domain list is the list of domains seen by the Plixer FlowPro Defender HTTP module since the last time the list was sent. Run the enable http_mon command to enable the HTTP monitoring. The <seconds> parameter must be set to a whole number between 300 (5 minutes) and 86400 (24 hours).

  • set collector <ip> <port> - Configures the collector IP address and port number for the Plixer FlowPro to send flows to. The collector IP and port are required. The flows will not be collected by the collector if it is not configured to listen on that port number.

  • set hostname <hostname> - Changes the hostname of the Plixer FlowPro appliance. The <hostname> parameter is required. A reboot is required for this change to take effect.

  • set license - Opens the plixer.ini file where the license key is stored. The plixer.ini file also stores the Plixer FlowPro configuration information. After editing the plixer.ini file, Plixer FlowPro will restart services to load the changes made.

Note

The set license command is an alias of the edit license command as defined in the interactive command help.

  • set password - Changes the password for the flowpro operating system user.

show

Function

Displays Plixer FlowPro information or settings.

Syntax

  • show configuration - Shows the current Plixer FlowPro configuration settings.

  • show domainlist - Shows all the custom domain lists configured on the system. To edit the custom domain list, use the edit domainlist command.

  • show erspan - Shows current ERSPAN configuration information. Only one ERSPAN tunnel can be configured per interface.

  • show features - Shows licensed Plixer FlowPro features.

  • show interfaces - Shows available interfaces that can be configured to monitor mirrored traffic.

  • show license - Shows the current license information.

  • show machine_id - Shows the machine id of the Plixer FlowPro appliance.

  • show status - Shows the status of Plixer FlowPro processes.

system

Function

Changes state of the Plixer FlowPro operating system.

Syntax

  • system restart - Restarts the operating system.

  • system shutdown - Shuts down the operating system.