traceoptions (Security NAT)
Syntax
traceoptions {
file {
filename;
files number;
match regular-expression;
size maximum-file-size;
(world-readable | no-world-readable);
}
flag flag;
no-remote-trace;
}
Hierarchy Level
[edit security nat]
Description
Enabling tracing can adversely impact scale and performance and may increase security risk. We strongly recommend using the trace, tracing, or traceoptions commands only under the guidance of a JTAC support engineer. After collecting the debug information, immediately disable tracing to minimize risk and restore normal system performance.
Configure NAT tracing options.
Options
file—Configure the trace file options.filename—Name of the file to receive the output of the tracing operation. Enclose the name within quotation marks. All files are placed in the directory/var/log. By default, the name of the file is the name of the process being traced.files number—Maximum number of trace files. When a trace file namedtrace-filereaches its maximum size, it is renamed totrace-file.0, thentrace-file.1, and so on, until the maximum number of trace files is reached. The oldest archived file is overwritten.If you specify a maximum number of files, you also must specify a maximum file size with the
sizeoption and a filename.Range: 2 through 1000 files
Default: 10 files
match regular-expression—Refine the output to include lines that contain the regular expression.size maximum-file-size—Maximum size of each trace file, in kilobytes (KB), megabytes (MB), or gigabytes (GB). When a trace file namedtrace-filereaches this size, it is renamedtrace-file.0. When thetrace-fileagain reaches its maximum size,trace-file.0is renamedtrace-file.1andtrace-fileis renamedtrace-file.0. This renaming scheme continues until the maximum number of trace files is reached. Then the oldest trace file is overwritten.If you specify a maximum file size, you also must specify a maximum number of trace files with the
filesoption and a filename.Syntax:
x Kto specify KB,x mto specify MB, orx gto specify GBRange: 10 KB through 1 GB
Default: 128 KB
world-readable|no-world-readable—By default, log files can be accessed only by the user who configures the tracing operation. Theworld-readableoption enables any user to read the file. To explicitly set the default behavior, use theno-world-readableoption.
flag—Trace operation to perform. To specify more than one trace operation, include multipleflagstatements.all—Trace with all flags enableddestination-nat-pfe—Trace destination NAT events on PFE-ukernel sidedestination-nat-re—Trace destination NAT events on Routing Engine (RE) sidedestination-nat-rt—Trace destination NAT events on Packet Forwarding Engine real-time (PFE-RT) sidesource-nat-pfe—Trace source NAT events on PFE-ukernel sidesource-nat-re—Trace source NAT events on RE sidesource-nat-rt—Trace source NAT events on PFE-RT sidestatic-nat-pfe—Trace static NAT events on PFE-ukernel sidestatic-nat-re—Trace static NAT events on RE sidestatic-nat-rt—Trace static NAT events on PFE-RT side
no-remote-trace—Set remote tracing as disabled.
Required Privilege Level
trace—To view this statement in the configuration.
trace-control—To add this statement to the configuration.
Release Information
Statement modified in Junos OS Release 9.6.