Kernel Debug on Security Gateway
Next Generation Security Gateway Guide R80.20 | 620
Module 'VPN' (Site-to-Site VPN and Remote Access VPN)
Syntax: fw ctl debug -m VPN + {all | <
List of Debug Flags
>}
Events related to cluster
Compression for encrypted connections
Various status counters (typically for real-time Monitoring)
Traffic acceleration issues (in hardware)
Check Point kernel attachment (access to kernel is shown as log entries)
err
Errors that should not happen, or errors that critical to the working of the VPN
module
gtp
Processing of GPRS Tunneling Protocol (GTP) connections
Also see the Module '
' (on page 595)
ifnotify
Notifications about the changes in interface status - up or down (as received
from OS)
ike
Enables all IKE kernel debug in respect to moving the IKE to the interface,
where it will eventually leave and the modification of the source IP of the IKE
packet, depending on the configuration
init
Initializes the VPN kernel and kernel data structures, when kernel is up, or
when policy is installed (it will also print the values of the flags that are set using
the
upon policy reload)
Processing of L2TP connections
Large Scale VPN (LSV)
Allocation of VPN pools and VPN contexts
Information related to creation and destruction of MSA / MSPI
VPN multicast
information related to interaction between VPN and CoreXL
nat
NAT issues , cluster IP manipulation (Cluster Virtual IP address <=> Member IP
address)
Allocation of Office Mode IP addresses
osu
Cluster Optimal Service Upgrade (sk107042
http://supportcontent.checkpoint.com/solutions?id=sk107042)
packet
Events that can happen for every packet, unless covered by more specific debug
flags
pcktdmp
Prints the encrypted packets before the encryption
Prints the decrypted packets after the decryption
policy
Events that can happen only for a special packet in a connection, usually related
to policy decisions or logs / traps
Handling of Security Association (SA) queues
To Next Page