156-586: Check Point Certified Troubleshooting Expert - R81 (CCTE)

By Checkpoint · Question Mode

QuestionQ44

Advanced Kernel Debugging

While performing firewall kernel debugging with fw ctl zdebug, you received less information than expected. You observed that many messages had been lost since the debug started. What should you do to resolve this issue?

Explanation

Kernel debug messages are held in a finite buffer and can be overwritten when message volume is high. Allocating a larger kernel debug buffer with fw ctl debug -buf 32768 preserves more messages for collection. Check Point documents -buf as the parameter that allocates the kernel debug buffer.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!