How to set SQL ALG trace on SRX
Summary:
How to set SQL ALG trace on SRX.
Problem or Goal: Generally, when setting an ALG trace, you simply set the ALG
Solution: traceoptions flag all
to log ALG trace. For example, doing ftp alg trace: The FTP ALG trace will log to flow trace file ftp. While doing similar setting for SQL ALG, ALG related messages are NOT logged in the flow trace file.[edit security] flow { traceoptions { file ftp size 200m; flag basic-datapath; } alg { ftp traceoptions flag all; } }
To archieve SQL ALG trace, additional configuration is needed. See the highlighted commands below:
Purpose: [edit security] alg { ftp traceoptions flag all; sql traceoptions flag all; } traceoptions { file sqlalg size 10m; <------ SQL ALG trace will log to this file flag all; level verbose; <------ hidden command}
Configuration Implementation Troubleshooting
Related Links: