How to set SQL ALG trace on SRX

 [KB20675] Show KB Properties
 
Summary:
How to set SQL ALG trace on SRX.
Problem or Goal:
Generally, when setting an ALG trace, you simply set the ALG traceoptions flag all to log ALG trace.

For example, doing ftp alg trace:
[edit security]
flow {
   traceoptions {
       file ftp size 200m;
       flag basic-datapath;
   }
   alg {
       ftp traceoptions flag all; 
   }
}
The FTP ALG trace will log to flow trace file ftp.

While doing similar setting for SQL ALG, ALG related messages are NOT logged in the flow trace file.
Solution:
To archieve SQL ALG trace, additional configuration is needed. See the highlighted commands below:
[edit security]
alg {
    ftp traceoptions flag all;
    sql traceoptions flag all;
}
traceoptions {
    file sqlalg size 10m; <------ SQL ALG trace will log to this file
    flag all;
    level verbose; <------ hidden command
}
Purpose:
Configuration
Implementation
Troubleshooting
Related Links: