Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Sabi_Halevi
Participant

TDERROR_ALL_ALL=5

Hi All,

 

There is a way to know if TDERROR is active besides looking into the .elg files?

 

 

Many Thanks

 

 

0 Kudos
6 Replies
S_E_
Advisor

Hi,

If I remember correctly the healthscript.sh shows active debugs/tcpdump and provides warnings

Regards

0 Kudos
Sabi_Halevi
Participant

Its doesn't work, This is the procedure that the health check script does to check:

"env | grep TDERROR | awk -F= '{print $1}'"
 
If you Turn on TDERROR and you run the line above its shows nothing.
 
Best Regards,
0 Kudos
Tal_Paz-Fridman
MVP Silver CHKP MVP Silver CHKP
MVP Silver CHKP

If you have all the .elg files you can search for the following lines when the debug was started:

Starting debug output
Setting TDERROR

0 Kudos
Sabi_Halevi
Participant

It can determine when it was started, but not if it is active in real-time..

0 Kudos
Tal_Paz-Fridman
MVP Silver CHKP MVP Silver CHKP
MVP Silver CHKP

No it cannot, but combine it with the string Stopping debug output, you can conclude if it was started and if it was stopped.

0 Kudos
Bob_Zimmerman
MVP Gold
MVP Gold

Pretty sure rebooting disables debugging without a "Stopping debug output" line, so it's probably also worth checking the uptime.

Not sure if a process crash or cprestart stops debugging.

0 Kudos

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events