Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

Navigation
Guide That Contains This Content
[+] Expand All
[-] Collapse All

    Verifying the Output of ALG Sessions

    This section contains information on configuration of system logs. You can compare the logs from your sessions to check whether the configurations are functioning correctly.

    System Log Messages

    Enabling system log generation and checking the system log are helpful for analysis of ALG flows. This section contains the following:

    System Log Configuration

    You can configure the enabling of system log messages at a number of different levels in the Junos OS CLI. As shown in the following sample configurations, the choice of level depends on how specific you want the event logging to be and what options you want to include. For details on the configuration options, see the Junos OS System Basics Configuration Guide PDF Document (system level) or the Junos OS Services Interfaces Configuration Guide PDF Document (all other levels).

    1. At the topmost global level:
      user@host# show system syslogfile messages {any any;}
    2. At the service set level:
      user@host# show services service-set svc_setsyslog {host local {services any;}}stateful-firewall-rules allow_rtsp;interface-service {service-interface ms-3/2/0;}
    3. At the service rule level:
      user@host# show services stateful-firewall rule allow_rtspmatch-direction input-output;term 0 {from {applications junos-rtsp;}then {accept;syslog;}}

    System Log Output

    System log messages are generated during flow creation, as shown in the following examples:

    The following system log message indicates that the ASP matched an accept rule:

    Oct 25 16:11:37 (FPC Slot 3, PIC Slot 2) {svc_set}[FWNAT]: ASP_SFW_RULE_ACCEPT: proto 6 (TCP) application: rtsp, ge-2/0/1.0:1.1.1.2:35595 -> 2.2.2.2:554, Match SFW accept rule-set: , rule: allow_rtsp, term: 0

    For a complete listing of system log messages, see the Junos OS System Log Messages Reference PDF Document.

    Published: 2012-07-02