QuestionQ16

Advanced Kernel Debugging

The Check Point Firewall Kernel is the central component of the Gaia operating system and an essential part of the traffic-inspection process. Two procedures are available to debug the firewall kernel. Which procedure/command is used to troubleshoot packet drops and other kernel activity while using minimal resources (a 1 MB buffer)?

  • A fw debug ctl
  • B fw ctl debug/kdebug
  • C fw ctl zdebug
  • D fwk ctl debug
Explanation

fw ctl zdebug is the lightweight kernel-debug procedure. It allocates a fixed 1024 KB (1 MB) debug buffer and can be used with relevant flags, such as + drop, to investigate packet drops and other Firewall-kernel activity.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!