CPUG

The Check Point User Group

A Resource For The Check Point Community.  Fast.  Useful.  Independent.

1. CCSA/CCSE One-Week Dual-Certification Training Course with CPUG in San Francisco!
    Courses Starting 12/8, (2009) 1/19, 2/9, 3/9, 4/6, 5/4, 6/8, 7/6, 8/3.
2. Join Us On LinkedIn - We now have a CPUG group.


Go Back   CPUG: The Check Point User Group > Check Point Firewall-1/VPN-1 And Related Products > Miscellaneous
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 2006-12-21
Junior Member
 
Join Date: 2006-12-21
Posts: 7
Rep Power: 0
kna_raghu has an average reputation (10+)
Default fw ctl commands in NG and NGX

In NGX, running the following command prints a message on stdout for every packet dropped by the FW kernel:

fw ctl kdbg drop

This does not work with NG FP3. Does anyone know the equivalent command for NG FP3?
Reply With Quote
  #2 (permalink)  
Old 2006-12-31
Senior Member
 
Join Date: 2006-10-03
Location: Offenbach/ Germany
Posts: 113
Rep Power: 3
Yasushi Kono has an average reputation (10+)
Default Re: fw ctl commands in NG and NGX

Did you try with
fw ctl kdebug -f > ~/drop.out?
Reply With Quote
  #3 (permalink)  
Old 2007-01-02
Junior Member
 
Join Date: 2006-12-21
Posts: 7
Rep Power: 0
kna_raghu has an average reputation (10+)
Default Re: fw ctl commands in NG and NGX

The following works:

fw ctl debug -buf 12288

fw ctl debug -m fw conn drop ld packet if

fw ctl kdebug -f > drop.out

grep "fw_log_drop" drop.out
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


All times are GMT -7. The time now is 21:29.


Powered by vBulletin® Version 3.7.4
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.2.0