Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?


traceoptions (NETCONF TLS)


Hierarchy Level


Enable trace options for NETCONF sessions that use the Transport Layer Security (TLS) protocol.


If you do not include this statement, NETCONF-over-TLS-specific tracing operations are not performed.


file filename

Name of the file to receive the output of the tracing operation. All files are placed in the /var/log directory.

  • Default: /var/log/netconf-tls

files number

(Optional) Maximum number of trace files.

When a trace file named trace-file reaches its maximum size, it is renamed and compressed to trace-file.0.gz, then trace-file.1.gz and so on, until the maximum number of trace files is reached. Then the oldest trace file is overwritten.

If you specify a maximum number of files, you also must specify a maximum file size with the size option and a filename.

  • Range: 2 through 1000 files

  • Default: 3 files

flag flag

Tracing operation to perform. To specify more than one tracing operation, include multiple flag statements.

  • Values:

    • all—Log all communication

    • app—Log the application data in plain text

    • general—Log tls-proxyd process-related messages

    • pki—Log PKI-related messages

    • plugin—Log plugin messages


Level of debugging output.

  • Values:

    • all—Match all levels

    • error—Match error conditions

    • info—Match informational messages

    • notice—Match conditions that should be handled specially

    • verbose—Match verbose messages

    • warning—Match warning messages

  • Default: error

match regular-expression

(Optional) Refine the output to include only those lines that match the regular expression.


Disable remote tracing.


(Optional) Disable unrestricted file access, which restricts file access to the owner. This is the default.

size size

(Optional) Maximum trace file size in bytes, kilobytes (KB), megabytes (MB), or gigabytes (GB).

If you don’t specify a unit, the default is bytes. If you specify a maximum file size, you also must specify a maximum number of trace files with the files option and a filename.

  • Syntax: size to specify bytes, sizek to specify KB, sizem to specify MB, or sizeg to specify GB

  • Range: 10,240 through 1,073,741,824 bytes

  • Default: 128 KB


(Optional) Enable unrestricted file access.

Required Privilege Level

system—To view this statement in the configuration.

system-control—To add this statement to the configuration.

Release Information

Statement introduced in Junos OS Release 20.2R1.

Statement introduced in Junos OS Evolved Release 21.4R1.