Debug Flow Basic in PAN-OS 5.0.4 (PA 2050)

[debsPal0]

I have been having problems with running Debug Flow Basic since upgrading from PAN-OS version 4.1.6 to 5.0.4.

I am using the following commands to setup my debug:

debug dataplane packet-diag set log feature flow basic

debug dataplane packet-diag set capture on

(I have not applied a capture filter as this is our test PA so very little traffic being passed)

The problem is that nothing is being to the output file ('less dp-log pan_packet_diag.log' shows as empty file).

I have rebooted the PA but still getting the same problem, this was working prior to me upgrading to 5.0.4.

Has anyone else experienced similar problems?

Regards,

James.

==========================================================

admin@PA2050> debug dataplane packet-diag show setting

--------------------------------------------------------------------------------

Packet diagnosis setting:

--------------------------------------------------------------------------------

Packet filter

  Enabled:                   no

  Match pre-parsed packet:   no

--------------------------------------------------------------------------------

Logging

  Enabled:                   no

  Log-throttle:              no

  Sync-log-by-ticks:         yes

  Features:

    flow    : basic

  Counters:

--------------------------------------------------------------------------------

Packet capture

  Enabled:                   no

  Snaplen:                   0

--------------------------------------------------------------------------------

admin@PA2050> debug dataplane packet-diag set log on

Packet log is enabled

admin@PA2050> less dp-log pan_packet_diag.log

0%

==========================================================

[ExclusiveNetworksGermany · Accepted solution]

In PanOS 5.0.x the Logs are stored per CPU and can be found in

pan_task_1.log,  pan_task_2.log .....

after finishing your debug session you can execute:

debug dataplane packet-diag aggregate-logs

Now you can see all logs again in pan_packet_diag.log

Regards

Marco

[debsPal0]

Many thanks, I can see all of my Debug output now.

Are minor changes such as this documented? I don't remember reading about this change in the release notes, although I would need to check again to be sure.

Regards,

James.