156-585: Check Point Certified Troubleshooting Expert

By Checkpoint · Question Mode

QuestionQ18

Advanced Kernel Debugging

While performing firewall kernel debugging with fw ctl zdebug, you received less information than expected. You observed that many messages had been lost since the debug began. What should you do to resolve this issue?

Explanation

Kernel debug messages are retained in a finite buffer and can be overwritten when message volume is high. Allocate a larger buffer with fw ctl debug -buf 32768 before collecting the debug output. Check Point documents -buf as the fw ctl debug parameter that allocates the kernel debug buffer.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!