Description


This article explains how to set the trace options for IDP on J-SRX devices.

Symptoms


How to setup the IDP trace options?

Solution


traceoptions {
     file {
          filename;
          files number;
          match regular-expression;
          size maximum-file-size;
          (world-readable | no-world-readable);
     }
     flag all;
     level (all | error | info | notice | verbose | warning);
     no-remote-trace;
}



Configure the IDP tracing options:
  1. file: Configure the trace file options.

    1. filename: Name of the file to receive the output of the tracing operation.
      Enclose the name within quotation marks. All files are placed in the directory /var/log. By default, the name of the file is the name of the process being traced.
    2. files number: Maximum number of trace files.
      When a trace file named trace-file reaches its maximum size, it is renamed to trace-file.0, then trace-file.1, and so on, until the maximum number of trace files is reached. The oldest archived file is overwritten.
      If you specify a maximum number of files, you also must specify a maximum file size with the size option and a filename.
      Range: 2 through 1000 files
      Default: 3 files
    3. match regular-expression: Refine the output to include lines that contain the regular expression.
    4. size maximum-file-size: Maximum size of each trace file, in kilobytes (KB), megabytes (MB), or gigabytes (GB).
      When a trace file named trace-file reaches this size, it is renamed trace-file.0.
      When the trace-file again reaches its maximum size, trace-file.0 is renamed trace-file.1 and trace-file is renamed trace-file.0. This renaming scheme continues until the maximum number of trace files is reached. Then the oldest trace file is overwritten.
      If you specify a maximum file size, you also must specify a maximum number of trace files with the files option and a filename.
      Syntax: x K to specify KB, x m to specify MB, or x g to specify GB
      Range: 10 KB through 1 GB
      Default: 128 KB
      world-readable | no-world-readable: By default, log files can be accessed only by the user who configures the tracing operation. The world-readable option enables any user to read the file. To explicitly set the default behavior, use the no-world-readable option.
  2. flag: Trace operation to perform.
    all: Trace with all flags enabled
  3. level: Set the level of debugging the output option.all: Match all levels
    error: Match error conditions
    info: Match informational messages
    notice: Match conditions that should be handled specially
    Verbose: Match verbose messages
    warning: Match warning messages
  4. no-remote-trace: Set remote tracing as disabled.