How to set SQL ALG trace on SRX

How to set SQL ALG trace on SRX

[KB20675] Show KB Properties

Summary:

How to set SQL ALG trace on SRX.

Problem or Goal:

Generally, when setting an ALG trace, you simply set the ALG traceoptions flag all to log ALG trace.

For example, doing ftp alg trace:

[edit security]
flow {
   traceoptions {
       file ftp size 200m;
       flag basic-datapath;
   }
   alg {
       ftp traceoptions flag all; 
   }
}


The FTP ALG trace will log to flow trace file ftp.

While doing similar setting for SQL ALG, ALG related messages are NOT logged in the flow trace file.

Solution:

To archieve SQL ALG trace, additional configuration is needed. See the highlighted commands below:

[edit security]
alg {
    ftp traceoptions flag all;
    sql traceoptions flag all;
}
traceoptions {
    file sqlalg size 10m; <------ SQL ALG trace will log to this file
    flag all;
    level verbose; <------ hidden command
}

Purpose:

Configuration
Implementation
Troubleshooting

Related Links: