traceoptions (Services SSL)
Syntax
traceoptions {
file {
filename;
files number;
match regular-expression;
size (Services) maximum-file-size;
(world-readable | no-world-readable);
}
flag flag;
level [brief | detail | extensive | verbose];
no-remote-trace;
packet-filter {
destination-ip;
destination-port;
source-ip;
source-port;
}
}
Hierarchy Level
[edit services ssl]
Description
Specify the trace file information.
Debug tracing on both Routing Engine and the Packet Forwarding
Engine can be enabled for SSL proxy by using [edit services ssl
traceoptions] command.
Options
file-name—Specify the name of file in which to write trace information.
files—Specify the maximum number of trace files. Range: 2 to 1000.match—Specify the regular expression for lines to be logged. This statement is supported on the SRX1500, SRX4100, SRX4200, SRX5400, SRX5600, and SRX5800 devices and vSRX Virtual Firewall.no-world-readable size—Do not allow any user to read the log file.size—Specify the maximum trace file size. Range: 10,240 to 1,073,741,824.world-readable—Allow any user to read the log file.
flag—Trace operation to perform. To specify more than one trace operation, include multipleflagstatements.all—Trace all the parameters.
cli-configuration—Trace CLI configuration events.
initiation—Trace initiation service events.
proxy—Trace proxy service events.
selected-profile—Trace events for profiles with
enable-flow-tracingset.termination—Trace termination service events.
level—Set the level of debugging the output option.brief—Match brief messages.detail—Match detail messages.extensive—Match extensive messages.verbose—Match verbose messages.
no-remote-trace—Set remote tracing as disabled.packet-filter—Set packet filter to capture the traffic details.destination-ipipvaddress—Specify a destination IP address.Range—1 through 65535
destination-portport-number—Specify a destination port.source-ipip-address—Specify a source IP address.source-portport-number—Specify a source IP port.Range—1 through 65535
Required Privilege Level
services—To view this statement in the configuration.
services-control—To add this statement to the configuration.
Release Information
Statement introduced in Junos OS Release 12.1X44-D10. This statement is supported on the SRX1500,
SRX4100, SRX4200, SRX5400, SRX5600, and SRX5800 devices and vSRX Virtual Firewall.
Junos OS Release 19.3R1 introduces packet-filter statement.