156-587: Check Point Certified Troubleshooting Expert - R81.20Demo

Question

After performing kernel debugging with fw ctl debug, you received a huge amount of information. It was saved in a very large file that is hard to open and analyze using standard text editors. Suggest a solution for this issue.

A Reduce debug buffer to 1024KB and run debug for several times
B Use Check Point InfoView utility to analyze debug output
C Use “fw ctl zdebug” because of 1024KB buffer size
D Divide debug information into smaller files. Use “fw ctl kdebug -f -o “filename” -m 25 - s “1024”

Explanation

Check Point kernel-debug collection supports cyclic output files. With fw ctl kdebug -f -o, the -m parameter sets the number of cyclic files and -s sets the size of each file in KB, preventing debug output from accumulating in one impractically large file.

Learn more

Check Point CLI Reference Guide: fw ctl debug and fw ctl kdebug

156-587: Check Point Certified Troubleshooting Expert - R81.20Demo

AstroTutor

Notes

Readiness

QuestionQ2

Community Discussion