Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
kb1
Collaborator

Global command for turning off debugging?

Is there a global command for turning off debugging? If so can someone please share it here. Also how do we know if say there are some debugging processed turned on? Is there a command for that as well?

 

Thank you.

4 Replies
Tal_Paz-Fridman
Employee
Employee

Debug is very different from product to product - Gateways, Servers, Clients etc., so it really depends on the environment.

It also depends on the process technology. You can create a script or list of commands to turn off of running debug.

For example:

For user space processes:

fw febug fwm off

fw debug fwd off

cpd_admin debug off

For kernel:

fw ctl debug 0

 

Refer to Check Point Processes and Daemons sk97638

HeikoAnkenbrand
Champion Champion
Champion

Hi @kb1,

Here you will find the most important commands to deactivate the debug:

For the most important user space processes:
CPM                   -> ./cpm_debug.sh -t crud -s INFO
                                ./cpm_debug.sh -r
FWM                   -> fw debug fwm off
FWD                   -> fw debug fwd off
CPD                    -> unset TMOUT
                                 cpd_admin debug on TDERROR_ALL_ALL=5
                                 tail –f $CPDIR/log/cpd.elg>&cpd_debug.txt
                                 cpd_admin debug off
                                 kill%
CPCA                   -> fw debug cpca off

VPN                     -> vpn debug off
                                 vpn debug ikeoff

RAD                     -> rad_admin rad debug off

DLPU                   -> fw_debug dlpu off

cp_file                 -> fw_debug cp_file_convertd off TDERROR_ALL_ALL=0

WSTLSD  (https)-> for PROC in $(pidof wstlsd); do fw debug $PROC off TDERROR-_ALL_ALL=0; done

For kernel debug:
                           -> fw ctl debug 0

Enable SecureXL after debug:
                            -> fwaccel on

Enable VPN SecureXL after debug:
                             > vpn accel on      (All VPN tunnels will be reset!)

For SmartConsole debug:
                            -> SCConfigManager.exe 
                                 LogLevel = Error
                                 CommLogLevel = Off

For all other user space processes, see the following article: sk97638

 

                             

➜ CCSM Elite, CCME, CCTE ➜ www.checkpoint.tips
the_rock
Legend
Legend

Personally, I only know of below 2 commands:

 

fw ctl debug 0

fw ctl debug -x

Don_Paterson
Advisor
Advisor

I have asked a similar question before. See this thread for some of the replies and feedback on it.

https://community.checkpoint.com/t5/Management/Debug/m-p/50089

 

0 Kudos

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events