topic Re: VPN CLI trac binary/exe - switch off debug output in SASE and Remote Access

VPN CLI trac binary/exe - switch off debug output

L3nny5 — Mon, 05 May 2025 12:27:31 GMT

Hello,

I'm looking for some switch/setting to turn of the massive amount of information the trac(.exe) command is producing if used.If the information being put out would be useful, we wouldn't mind, but it is very annoying to properly debug a client setup script.

FYI: I'm not a network nor Checkpoint expert. I'm the Mac admin which is responsible to deploy the VPN client to the clients.

Is there anything we can do?

Thanks

Lenny

Re: VPN CLI trac binary/exe - switch off debug output

PhoneBoy — Mon, 05 May 2025 23:06:32 GMT

As far as I know, there is no way to tune the amount of output trac provides.
What are you attempting to use it for and what do you consider "too much information" exactly?

Re: VPN CLI trac binary/exe - switch off debug output

L3nny5 — Tue, 13 May 2025 09:49:55 GMT

Well we are configuring our VPN connection points (gateway addresses) via Trac. But I noticed a difference if you execute it as a normal user or as root. You don't get all the annoying verbose output, if you do it as a user.

I was trying to debug our script which creates the VPN connections and couldn't figure out what the issue was and the verbose output after sending a command was not very helpful finding the issue. Turns out, that an element of the expect part of the script was missing a syntax.

Re: VPN CLI trac binary/exe - switch off debug output

PhoneBoy — Tue, 13 May 2025 14:45:46 GMT

Good to know a privileged user executing trac gives more information.
I've only ever run trac as a regular user.

Re: VPN CLI trac binary/exe - switch off debug output

L3nny5 — Wed, 14 May 2025 11:19:09 GMT

Be aware that you only get more information if you execute Trac as root. Sudo alone will give you no additional output.

Change to root

sudo -i

/Library/Application\ Support/Checkpoint/Endpoint\ Connect/trac help

will give you the verbose output

sudo /Library/Application\ Support/Checkpoint/Endpoint\ Connect/trac help

won't