topic Re: Debug stop commands in General Topics

Debug stop commands

-K- — Thu, 13 Jul 2023 07:32:40 GMT

Hi All,

Just a quick one, is there any general command to stop debugs running on firewall gateway as when in a large scale environment multiple team is managing or operating checkpoint firewalls its highly possible that someone started debug and then forget to turn it off.

I know below which we can put in crontab which will run every hour to check and turn off debug if its already running and missed to turn it off to avoid high CPU and performance issue on gateway.

fw ctl debug 0
fwaccel dbg resetall

crontab -e

0 * * * * /var/log/debug_stop_script.sh

Re: Debug stop commands

Chris_Atkinson — Thu, 13 Jul 2023 12:26:15 GMT

Please see the following previous discussion

https://community.checkpoint.com/t5/General-Topics/Global-command-for-turning-off-debugging/td-p/117096#M21787

Re: Debug stop commands

the_rock — Thu, 13 Jul 2023 12:34:06 GMT

Personally, I had been doing only below 2 commands for the last 15 years and they never let me down : - )

Andy

fw ctl debug 0

fw ctl debux -x

Re: Debug stop commands

-K- — Sat, 15 Jul 2023 23:30:27 GMT

fw ctl debux -x --> you mean fw ctl debug -x right ?

what will be the use for -x ....plesae suggest?

Re: Debug stop commands

the_rock — Sun, 16 Jul 2023 00:08:18 GMT

Yes, debug, not debux LOL

-x to disable, 0 to turn off

Andy