- Products
- Learn
- Local User Groups
- Partners
- More
The Great Exposure Reset
24 February 2026 @ 5pm CET / 11am EST
AI Security Masters E4:
Introducing Cyata - Securing the Agenic AI Era
AI Security Masters E3:
AI-Generated Malware
CheckMates Go:
CheckMates Fest
Lab example:
[Expert@CP-GW:0]# cd /var/log/scripts/
[Expert@CP-GW:0]# chmod 777 *
[Expert@CP-GW:0]# dos2unix *
dos2unix: converting file cp_list_kdebug_flags.sh to Unix format ...
[Expert@CP-GW:0]# ./cp_list_kdebug_flags.sh
debug: option requires an argument -- m
Usage: fw ctl debug [-d <strings>] [-s "<string>"] [-v ("<vs ids>"|all)] [-k] [-x] [-m <module>] [-e expr |-i <filter-file|-> | -u] [+|-] <options | all | 0> [-z]
[-F simple filter "{src IP},{src port},{dst IP},{dst port},{protocol num}"]
[-H IP address filter "{IP address}"]
Or: fw ctl debug [-t (NONE|ERR|WRN|NOTICE|INFO)] [-f (RARE|COMMON)]
Or: fw ctl debug -buf [buffer size][-v ("<vs ids>"|all)][-k]
-h - for help
Where possible options are:
HOST:
Module: kiss
Kernel debugging options: error warning ioctl memory misc flofiler driver pools vbuf pm rem sm dfa pmdump pmint htab ghtab mtctx queue thread thinnfa salloc pcre kw shmem swblade kqstats stat usrmem worker handles bench memprof timers cookie packet leak htab_bl ghtab_bl htab_bl_err htab_bl_warn htab_bl_exp htab_bl_infra accel_pm connstats dbg_filter zeco connview cifs
Messaging threshold set to type=Notice freq=Common
-----------------------------------------------------
SecureXL:
Module: kiss
Kernel debugging options: error warning ioctl memory misc flofiler driver pools vbuf pm rem sm dfa pmdump pmint htab ghtab mtctx queue thread thinnfa salloc pcre kw shmem swblade kqstats stat usrmem worker handles bench memprof timers cookie packet leak htab_bl ghtab_bl htab_bl_err htab_bl_warn htab_bl_exp htab_bl_infra accel_pm connstats dbg_filter zeco connview cifs
Messaging threshold set to type=Notice freq=Common
-----------------------------------------------------
HOST:
Module: kissflow
Kernel debugging options: error warning memory pm compile dfa
Messaging threshold set to type=Info freq=Common
-----------------------------------------------------
SecureXL:
Module: kissflow
Kernel debugging options: error warning memory pm compile dfa
Messaging threshold set to type=Info freq=Common
-----------------------------------------------------
HOST:
Module: fw
Kernel debugging options: error warning cookie crypt domain ex driver filter hold if install ioctl kbuf ld log machine memory misc packet q xlate xltrc conn synatk media sip vm chain bridge tcpstr scv highavail ipv6 packval sync ipopt link nat cifs drop route citrix misp portscan leaks mgcp sock mail spii chainfwd msnms wire balance dynlog smtp wap content mrtsync sam sock malware cmi aspii dos advp multik netquota monitor monitorall dfilter integrity epq cvpnd cptls ftp nac span ucd acct dlp ua icmptun dnstun ips rad te user shmem dmd qos context corr connstats nat64 ntup event cgnat sctp prof caf tlsparser cpsshi handlers drop_tmpl nat_sync tp_container unibypass bypass_timer fast_accel nat_hitcount mdps fast_accel_producer iot ds_dmd_sleep_mode insp_bl_ld dcerpc connview quic_parser mbuf quic
Messaging threshold set to type=Info freq=Common
-----------------------------------------------------
SecureXL:
Module: seqvalid
Kernel debugging options: error warning seqval sock
Messaging threshold set to type=Info freq=Common
-----------------------------------------------------
HOST:
Module: h323
Kernel debugging options: error init h225 h245 ras decode align cpas
Messaging threshold set to type=Info freq=Common
-----------------------------------------------------
SecureXL:
Module: synatk
Kernel debugging options: error warning cookie radix_modify radix_match radix_dump
Messaging threshold set to type=Info freq=Common
-----------------------------------------------------
HOST:
Module: cpcode
Kernel debugging options: error warning echo policy ioctl run persist memory init vm cplog csv io url kisspm
Messaging threshold set to type=Info freq=Common
-----------------------------------------------------
SecureXL:
Module: fg
Kernel debugging options: error chain install tcp memory sched time policy url dns rtm ls log conn drops dropsv rates timers chainq llq pkt classify general verbose flow fwrate qosaccel multik
Messaging threshold set to type=Info freq=Common
-----------------------------------------------------
HOST:
Module: upconv
Kernel debugging options: error warning info tree map mem utf8 utf7
Messaging threshold set to type=Info freq=Common
-----------------------------------------------------
HOST:
Module: WS_SIP
Kernel debugging options: fatal error warning info timestamp connection http2 http3 hpack session parser body global stat memory address policy pfinder regexp coverage report_mgr spii uuid ioctl module mem_pool pkt_dump subject sslt cookie stream vs flow fastpath event ssl_insp parser_err crumb
Messaging threshold set to type=Info freq=Common
-----------------------------------------------------
HOST:
Module: crypto
Kernel debugging options: error warning info
Messaging threshold set to type=Info freq=Common
-----------------------------------------------------
HOST:
Module: multik
Kernel debugging options: error conn packet api message state packet_err counter event quota ioctl lock uid queue fwstats cache_tab vpn_multik temp_conns prio route dumbo
Messaging threshold set to type=Info freq=Common
-----------------------------------------------------
HOST:
Module: PSL
Kernel debugging options: error warning tcpstr seq pkt stats drop lock cookie glue
Messaging threshold set to type=Info freq=Common
-----------------------------------------------------
HOST:
Module: CPAS
Kernel debugging options: error warning tcp api glue events conns pkts timer tcpinfo http ftp skinny notify sync icmp pmtu mbuf
Messaging threshold set to type=Info freq=Common
-----------------------------------------------------
HOST:
Module: UDP_IS
Kernel debugging options: error warning debug drop glue
Messaging threshold set to type=Info freq=Common
-----------------------------------------------------
HOST:
Module: seqvalid
Kernel debugging options: error warning seqval sock
Messaging threshold set to type=Info freq=Common
-----------------------------------------------------
HOST:
Module: synatk
Kernel debugging options: error warning cookie radix_modify radix_match radix_dump
Messaging threshold set to type=Info freq=Common
-----------------------------------------------------
HOST:
Module: MUX
Kernel debugging options: error warning comm api passive active stream ws tls http_disp tol udp test proxy_tp stats dmd quic quic_parser limit cifs
Messaging threshold set to type=Info freq=Common
-----------------------------------------------------
HOST:
Module: CPSSH
Kernel debugging options: error warning info trans_proto mux_inf crypto mux_encrypt_app mux_decrypt_app mux_conn_app mux_auth_app state_machine session conn_proto authentication binary_packet mux_stream sftp_parser mux_ssh_parser_app probe dump
Messaging threshold set to type=Info freq=Common
-----------------------------------------------------
HOST:
Module: fg
Kernel debugging options: error chain install tcp memory sched time policy url dns rtm ls log conn drops dropsv rates timers chainq llq pkt classify general verbose flow fwrate qosaccel multik
Messaging threshold set to type=Info freq=Common
-----------------------------------------------------
HOST:
Module: UC
Kernel debugging options: error warning info verbose address subject timestamp memory vs coverage module webapi htab
Messaging threshold set to type=Info freq=Common
-----------------------------------------------------
HOST:
Module: dlpk
Kernel debugging options: error drv cmi stat identity rulebase
Messaging threshold set to type=Info freq=Common
-----------------------------------------------------
HOST:
Module: dlpuk
Kernel debugging options: error warning info verbose address subject timestamp memory vs coverage module buffer serialize policy
Messaging threshold set to type=Info freq=Common
-----------------------------------------------------
HOST:
Module: SDWAN
Kernel debugging options: error warning misc isp ioctl cxl reroute active_peers
Messaging threshold set to type=Info freq=Common
-----------------------------------------------------
HOST:
Module: cpconntim
Kernel debugging options: error warning timers
Messaging threshold set to type=Info freq=Common
-----------------------------------------------------
HOST:
Module: gtp
Kernel debugging options: packet parse parse2 state state2 log log2 create create2 delete delete2 update modify other other2 tpdu policy ld ioctl error sxl dbg capacity
Messaging threshold set to type=Info freq=Common
-----------------------------------------------------
HOST:
Module: VPN
Kernel debugging options: driver err packet policy sas rdp pcktdmp queue init sr mem comp route counters mspi cphwd ref cluster nat l2tp tnlmon task warn tcpt tagging ike ifnotify resolver topology multik lsv rsl om_alloc ike_trace iked iked_trap sdwan
Messaging threshold set to type=Info freq=Common
-----------------------------------------------------
HOST:
Module: WSIS
Kernel debugging options: error warning info verbose address subject timestamp memory vs coverage datastruct common decoder parser cipher crumb flow dump
Messaging threshold set to type=Info freq=Common
-----------------------------------------------------
HOST:
Module: UPIS
Kernel debugging options: error warning info verbose address subject timestamp memory vs coverage module policy tables fwapp upapp db mgr clob memory vpn report sna crumbs mutex topo update cpdiag dnd initialapp sdwanapp upr
Messaging threshold set to type=Info freq=Common
-----------------------------------------------------
HOST:
Module: cmi_loader
Kernel debugging options: error warning info verbose address subject timestamp memory vs coverage module connection policy sigload global_states inspect cpcode parsers_is
Messaging threshold set to type=Info freq=Common
-----------------------------------------------------
HOST:
Module: NRB
Kernel debugging options: error warning info verbose address subject timestamp memory vs coverage module session policy match appi ssl_insp dlp sec_rb nat sdwan
Messaging threshold set to type=Info freq=Common
-----------------------------------------------------
HOST:
Module: SGEN
Kernel debugging options: fatal error warning info general serialize load engine field
Messaging threshold set to type=Info freq=Common
-----------------------------------------------------
HOST:
Module: RAD_KERNEL
Kernel debugging options: error warning info verbose address subject timestamp memory vs coverage global cache malmis sdwan_dump sdwan_cache
Messaging threshold set to type=Info freq=Common
-----------------------------------------------------
HOST:
Module: WS
Kernel debugging options: fatal error warning info timestamp connection http2 http3 hpack session parser body global stat memory address policy pfinder regexp coverage report_mgr spii uuid ioctl module mem_pool pkt_dump subject sslt cookie stream vs flow fastpath event ssl_insp parser_err crumb
Messaging threshold set to type=Info freq=Common
-----------------------------------------------------
HOST:
Module: APPI
Kernel debugging options: error warning info verbose address subject timestamp memory vs coverage module connection policy global observer account limit urlf_ssl btime referrer sdwan delay_match appi_ssl
Messaging threshold set to type=Info freq=Common
-----------------------------------------------------
HOST:
Module: UP
Kernel debugging options: error warning info verbose address subject timestamp memory vs coverage module connection policy manager clob memory account rulebase urlf_ssl btime log limit sec_rb prob prob_impl vpn mab match stats probtrc
Messaging threshold set to type=Info freq=Common
-----------------------------------------------------
HOST:
Module: MALWARE
Kernel debugging options: error warning info verbose address subject timestamp memory vs coverage module global memory ioc te av policy
Messaging threshold set to type=Info freq=Common
-----------------------------------------------------
HOST:
Module: UCA
Kernel debugging options: error warning info verbose address subject timestamp memory vs coverage module track policy uca_1 uca_2 uca_3
Messaging threshold set to type=Info freq=Common
-----------------------------------------------------
HOST:
Module: CI
Kernel debugging options: fatal error warning info track timestamp coverage subject memory module session address vs regexp ioctl policy profile filter uf av crypto stat
Messaging threshold set to type=Info freq=Common
-----------------------------------------------------
HOST:
Module: SFT
Kernel debugging options: fatal error warning info mgr
Messaging threshold set to type=Info freq=Common
-----------------------------------------------------
HOST:
Module: ICAP_CLIENT
Kernel debugging options: error warning info verbose address subject timestamp memory vs coverage global module policy blade cpas icap trick daf_tcp daf_module daf_cmi daf_policy daf_rulebase
Messaging threshold set to type=Info freq=Common
-----------------------------------------------------
HOST:
Module: FILEAPP
Kernel debugging options: error warning info verbose address subject timestamp memory vs coverage module global memory filetype normalize parser upload
Messaging threshold set to type=Info freq=Common
-----------------------------------------------------
HOST:
Module: dlpda
Kernel debugging options: error warning info verbose address subject timestamp memory vs coverage module mngr policy engine cmi ctx slowpath filecache observer
Messaging threshold set to type=Info freq=Common
-----------------------------------------------------
HOST:
Module: FILE_SECURITY
Kernel debugging options: error warning info verbose address subject timestamp memory vs coverage module global memory cache
Messaging threshold set to type=Info freq=Common
-----------------------------------------------------
HOST:
Module: TPUTILS
Kernel debugging options: error warning info verbose address subject timestamp memory vs coverage module global memory bloom
Messaging threshold set to type=Info freq=Common
-----------------------------------------------------
HOST:
Module: ZPH
Kernel debugging options: error warning info verbose address subject timestamp memory vs coverage module global nemo zphi
Messaging threshold set to type=Info freq=Common
-----------------------------------------------------
HOST:
Module: DOMO
Kernel debugging options: error warning info verbose address subject timestamp memory vs coverage module conn policy
Messaging threshold set to type=Info freq=Common
-----------------------------------------------------
HOST:
Module: SDWANRB
Kernel debugging options: error warning info verbose address subject timestamp memory vs coverage module policy rulebase log appi prob cache_dump global cache appi_match
Messaging threshold set to type=Info freq=Common
-----------------------------------------------------
HOST:
Module: IDAPI
Kernel debugging options: error warning info verbose address subject timestamp memory vs coverage module htab data async classifier clob observer test log xff
Messaging threshold set to type=Info freq=Common
-----------------------------------------------------
HOST:
Module: RTM
Kernel debugging options: driver err topo policy init chain ioctl import special rtm sort netmasks per_conn per_pckt view_update view_update1 view_add performance con_conn tabs s_err wd accel
Messaging threshold set to type=Info freq=Common
-----------------------------------------------------
[Expert@CP-GW:0]#
Lab example:
[Expert@CP-GW:0]# cd /var/log/scripts/
[Expert@CP-GW:0]# chmod 777 *
[Expert@CP-GW:0]# dos2unix *
dos2unix: converting file cp_list_kdebug_flags.sh to Unix format ...
[Expert@CP-GW:0]# ./cp_list_kdebug_flags.sh
debug: option requires an argument -- m
Usage: fw ctl debug [-d <strings>] [-s "<string>"] [-v ("<vs ids>"|all)] [-k] [-x] [-m <module>] [-e expr |-i <filter-file|-> | -u] [+|-] <options | all | 0> [-z]
[-F simple filter "{src IP},{src port},{dst IP},{dst port},{protocol n
About CheckMates
Learn Check Point
Advanced Learning
YOU DESERVE THE BEST SECURITY