Quantcast
Channel: All SRX Services Gateway posts
Viewing all articles
Browse latest Browse all 17645

traceoptions only showing dropped packets inspite of applying basic-datapath flag

$
0
0
Customer configured traceoptions in SRX 3400. But when he see show log <file name for traceoption> he only sees dropped packet, however he has configured with flag basic-datapath. I can see sessions on show security flow session for the source for which traceoption is applied.

Below is teh config for traceoption:-
 show configuration | match traceoption | display set
set security flow traceoptions file 001_check
set security flow traceoptions flag basic-datapath
set security flow traceoptions packet-filter trace-filer source-prefix x.x.x.x/32
set security flow traceoptions packet-filter trace-filer destination-prefix y.y.y.y/32

Below shows session is forming
show security flow session destination-prefix y.y.y.y source-prefix x.x.x.x
node0:
--------------------------------------------------------------------------
Flow Sessions on FPC1 PIC0:
Session ID: 20063422, Policy name: POL-KCC-ORN-001/37, State: Active, Timeout: 2, Valid
In: x.x.x.x/2 --> y.y.y.y/14560;icmp, If: reth0.2269, Pkts: 1, Bytes: 84
Out: y.y.y.y/14560 --> x.x.x.x/2;icmp, If: reth1.452, Pkts: 1, Bytes: 84
Session ID: 20340282, Policy name: POL-KCC-ORN-001/37, State: Active, Timeout: 4, Valid

But in traceoptions only get the dropped packet
13:59:55.445631:CID-01:FPC-01:PIC-00:THREAD_ID-18:RT:tcplib_input_process: tcb_state=3 pkt info: seq_no=11416584,end_seq_no=11416585,ack_no=4112892585, tcp_flags=10, tcp_data_size=1, tcp_hdr_size=20, ip_hdr_size=20, win_size=64000
Dec  9 13:59:56 13:59:55.445660:CID-01:FPC-01:PIC-00:THREAD_ID-18:RT:tcplib_ha_failover_check: ha failover check tcb=0x2df62b70 tcp failover cnt=5 session failover cnt=5
Dec  9 13:59:56 13:59:55.445682:CID-01:FPC-01:PIC-00:THREAD_ID-18:RT:tcplib_estab_conn_process: control flag=1
Dec  9 13:59:56 13:59:55.445691:CID-01:FPC-01:PIC-00:THREAD_ID-18:RT:tcplib_process_received_data: jbuf: seq_no:11416584 end_seq_no:11416585 next_in_order:11416585
Dec  9 13:59:56


Viewing all articles
Browse latest Browse all 17645

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>