Debug Flow Basic in PAN-OS 5.0.4 (PA 2050)

debsPal0 — Fri, 24 May 2013 07:26:27 GMT

I have been having problems with running Debug Flow Basic since upgrading from PAN-OS version 4.1.6 to 5.0.4.

I am using the following commands to setup my debug:

debug dataplane packet-diag set log feature flow basic

debug dataplane packet-diag set capture on

(I have not applied a capture filter as this is our test PA so very little traffic being passed)

The problem is that nothing is being to the output file ('less dp-log pan_packet_diag.log' shows as empty file).

I have rebooted the PA but still getting the same problem, this was working prior to me upgrading to 5.0.4.

Has anyone else experienced similar problems?

Regards,

James.

==========================================================

admin@PA2050> debug dataplane packet-diag show setting

--------------------------------------------------------------------------------

Packet diagnosis setting:

--------------------------------------------------------------------------------

Packet filter

Enabled: no

Match pre-parsed packet: no

--------------------------------------------------------------------------------

Logging

Enabled: no

Log-throttle: no

Sync-log-by-ticks: yes

Features:

flow : basic

Counters:

--------------------------------------------------------------------------------

Packet capture

Enabled: no

Snaplen: 0

--------------------------------------------------------------------------------

admin@PA2050> debug dataplane packet-diag set log on

Packet log is enabled

admin@PA2050> less dp-log pan_packet_diag.log

==========================================================

Re: Debug Flow Basic in PAN-OS 5.0.4 (PA 2050)

ExclusiveNetworksGermany — Fri, 24 May 2013 10:20:14 GMT

In PanOS 5.0.x the Logs are stored per CPU and can be found in

pan_task_1.log, pan_task_2.log .....

after finishing your debug session you can execute:

debug dataplane packet-diag aggregate-logs

Now you can see all logs again in pan_packet_diag.log

Regards

Marco

Re: Debug Flow Basic in PAN-OS 5.0.4 (PA 2050)

debsPal0 — Fri, 24 May 2013 11:12:21 GMT

Many thanks, I can see all of my Debug output now.

Are minor changes such as this documented? I don't remember reading about this change in the release notes, although I would need to check again to be sure.

Regards,

James.

topic Debug Flow Basic in PAN-OS 5.0.4 (PA 2050) in General Topics

Debug Flow Basic in PAN-OS 5.0.4 (PA 2050)

Re: Debug Flow Basic in PAN-OS 5.0.4 (PA 2050)

Re: Debug Flow Basic in PAN-OS 5.0.4 (PA 2050)