This article provides information about certain security concerns regarding SSL private key and packets, when a flowd core dump is taken.

An administrator may be asked by JTAC to take a forced core (via kill -6 [pid] ) to provide it for troubleshooting an issue. Companies, such as financial institutions and so on, may have concerns about their sensitive data and SSL private keys.

When a core dump is taken, it will contain the memory that is used by the process in question and provide the data pointed to by the memory pointers.

This can vary, given the type of process that is providing the core; but a flowd core file will contain transient data packets that flow through the SRX device, when the core is taken. In the case of SSL decryption, it can show decrypted traffic as well. However, it will not contain the SSL private key file.