NetScreen Debug Cheat Sheet

System Related Debug Commandspolicy, syslog, task, auth, flash, admin, dlog, filesys, ids, interface, logging, nat, nsmgmt, user, vr, timer

Traffic and Packet Flow Debug Commands traffic, flow, ip, session, socket, portnum, trackip, zone

Protocol Related Debug Commandsarp, ssh, snmp, dns, dhcp, icmp, tcp, web

VPN Related Debug Commandspki, flow-tunnel, ssl

COMMANDS

Created by: Bryan Murphy ( http://downgrade.org ) -- v1.1

SUB COMMANDS

Enabling Debugdebug <command> <sub_command>

ENABLING

Exampleget db <command>

Include/Excludeget db stream | <include/exclude> <string>

Note: <string> may be a string or a regular expression

DISPLAY

ffilter Exampleset ff dst-ip <ip> dest-port <port>

Note: Apply the filters before enabling and producing debug outputs.

ffiltersdest-ip, dest-port, src-ip, src-port, ip-protocol

Display Active ffiltersget ff

FILTERING

Disable a ffilterunset ff <id number>

Clear/Erase the Debug Bufferclear db

Disable All Debuggingundebug all

Disable Specific Debuggingundebug <command> <sub_command>l

dynpol dynamic policy searchdrop drop pakbasic basic debugingall all flow

shows available subsExplanation

?Sub Comand

internal internal debugillegal illegal debug

CLEANING UP