Verifying the Output of ALG Sessions
This section contains information on configuration of system logs. You can compare the logs from your sessions to check whether the configurations are functioning correctly.
System Log Messages
Enabling system log generation and checking the system log are helpful for analysis of ALG flows. This section contains the following:
System Log Configuration
You can configure the enabling of system log messages at a number
of different levels in the Junos OS CLI. As shown in the following
sample configurations, the choice of level depends on how specific
you want the event logging to be and what options you want to include.
For details on the configuration options, see the Junos OS System Basics Configuration Guide
(system
level) or the Junos OS Services Interfaces Configuration Guide
(all other levels).
- At the topmost global level:user@host# show system syslogfile messages {any any;}
- At the service set level:user@host# show services service-set svc_setsyslog {host local {services any;}}stateful-firewall-rules allow_rtsp;interface-service {service-interface ms-3/2/0;}
- At the service rule level:user@host# show services stateful-firewall rule allow_rtspmatch-direction input-output;term 0 {from {applications junos-rtsp;}then {accept;syslog;}}
System Log Output
System log messages are generated during flow creation, as shown in the following examples:
The following system log message indicates that the ASP matched an accept rule:
For a complete listing of system log messages, see the Junos OS System Log Messages Reference
.

