Description

This article provides information on how to set the SQL ALG trace on SRX devices.

Symptoms

Generally, when setting an ALG trace, you just have to set the  traceoptions flag all ALG  to log the ALG trace.

For example, doing ftp alg trace:

[edit security]
flow {
   traceoptions {
       file ftp size 200m;
       flag basic-datapath;
   }
}
alg {
    ftp traceoptions flag all; 
}

The FTP ALG trace will log to the flow trace file FTP. When setting similar settings for SQL ALG, ALG related messages are not logged in the flow trace file.

Solution


To archive the SQL ALG trace, an additional configuration is required. Refer to the highlighted commands below:

[edit security]
alg {
    ftp traceoptions flag all;
    sql traceoptions flag all;
}
traceoptions {
    file sqlalg size 10m; < SQL ALG trace will log to this file
    flag all;
    level verbose; < hidden command
}