topic Re: ONELINER - Show all Kernel Parameter in General Topics

ONELINER - Show all Kernel Parameter

HeikoAnkenbrand — Thu, 29 Jan 2026 11:35:00 GMT

This oneliner shows you all kernel parameters of the firewall gateway with their values.
This can be useful in the debug case to see an overview of all kernel parameters.

modinfo -p $FWDIR/boot/modules/fw_kern*.o | sort -u | awk 'BEGIN {FS=":"} ; {print $1}' | xargs -n 1 fw ctl get int

Here is an example of the output:

Version:

01-28-2026 R82+R82.10 upgrade
05-04-2021 created

Re: ONELINER - Show all Kernel Parameter

Timothy_Hall — Fri, 11 Jun 2021 15:03:01 GMT

Here is the equivalent command to list all the variables in the sim (SecureXL Implementation Module) driver:

modinfo -p $PPKDIR/boot/modules/sim_kern*.o | sort -u | awk 'BEGIN {FS=":"} ; {print $1}' | xargs -i fw ctl get int {} -a 2> /dev/null | grep "PPAK 0:" | cut -d: -f2

While this command and the one Heiko provided can be useful for obtaining insight to the various kernel settings that are available, be warned that the variable names may not mean what you think they mean, or cause unintended consequences (including even crashing or hanging the firewall) if you attempt to tamper with them. Most of these variables are undocumented, and I'd especially not recommend messing with those outside a lab environment without consulting TAC first.

Re: ONELINER - Show all Kernel Parameter

Lars_Laschner — Sat, 12 Jun 2021 08:16:08 GMT

How can I change the kernel parameters permanently?

Re: ONELINER - Show all Kernel Parameter

HeikoAnkenbrand — Sat, 12 Jun 2021 08:25:21 GMT

You can configure some of the Firewall kernel parameters only permanently in the special configuration file $FWDIR/boot/modules/fwkern.conf.

Re: ONELINER - Show all Kernel Parameter

HeikoAnkenbrand — Sat, 12 Jun 2021 08:32:28 GMT

You cannot configure SecureXL kernel parameters on-the-fly with the "fw ctl set" command.

You must configure them only permanently in the special configuration file - $PPKDIR/conf/simkern.conf Schedule a maintenance window, because this procedure requires a reboot. For SecureXL kernel parameters, see more here sk43387.

Re: ONELINER - Show all Kernel Parameter

JozkoMrkvicka — Sat, 12 Jun 2021 20:48:38 GMT

Would it be possible to print all kernel tables with respective values, tresholds and peaks?

I can imagine it will help with some troubleshooting (if some table is full as an example).

Re: ONELINER - Show all Kernel Parameter

PhoneBoy — Mon, 14 Jun 2021 04:39:50 GMT

fw tab -u gives you all the kernel tables with what's in them.
fw tab -s will give you a summary of all the tables with # of entries and high water mark.

Re: ONELINER - Show all Kernel Parameter

Power_Support — Mon, 14 Jun 2021 21:08:58 GMT

Nice info!