See the following sections:
- traceoptions {
-
- flag {
- all <detail | extensive
| terse>;
- authentication <detail
| extensive | terse>;
- proxy <detail | extensive
| terse>;
- }
- }
- [edit security firewall-authentication]
Statement introduced in Release 8.5 of JUNOS software.
Define data-plane firewall authentication tracing options.
This statement is supported on J-series and SRX-series devices.
flag—Trace operation to perform. To specify more than one trace operation, include multiple flag statements.
detail—Display moderate amount of data in trace.
extensive—Display extensive amount of data in trace.
terse—Display minimum amount of data in trace.
trace—To view this statement in the configuration.
trace-control—To add this statement to the configuration.
- traceoptions {
-
- flag {
- all <detail | extensive
| terse>;
-
cc <detail | extensive | terse>;
- h225-asn1 <detail | extensive
| terse>;
- h245 <detail | extensive
| terse>;
- h245-asn1 <detail | extensive
| terse>;
- q931 <detail | extensive
| terse>;
- ras <detail | extensive
| terse>;
- ras-asn1 <detail | extensive
| terse>;
- }
- }
- [edit security alg h323]
Statement introduced in Release 8.5 of JUNOS software.
Configure H.323 tracing options.
This statement is supported on J-series devices.
flag—Trace operation to perform. To specify more than one trace operation, include multiple flag statements.
detail—Display moderate amount of data in trace.
extensive—Display extensive amount of data in trace.
terse—Display minimum amount of data in trace.
trace—To view this statement in the configuration.
trace-control—To add this statement to the configuration.
- traceoptions {
- file
filename <files number > <match regular-expression > <size maximum-file-size >
- <world-readable | no-world-readable>;
- flag
flag ;
- }
- [edit security flow]
Statement introduced in Release 8.5 of JUNOS software.
Configure flow tracing options.
This statement is supported on J-series and SRX-series devices.
file filename —Name of the file to receive the output of the tracing operation. Enclose the name within quotation marks. All files are placed in the directory /var/log.
files number —(Optional) Maximum number of trace files. When a trace file named trace-file reaches its maximum size, it is renamed to trace-file .0, then trace-file.1 , and so on, until the maximum number of trace files is reached. The oldest archived file is overwritten.
If you specify a maximum number of files, you also must specify a maximum file size with the size option and a filename.
match regular-expression —(Optional) Refine the output to include lines that contain the regular expression.
size maximum-file-size —(Optional) Maximum size of each trace file, in kilobytes (KB), megabytes (MB), or gigabytes (GB). When a trace file named trace-file reaches this size, it is renamed trace-file .0. When the trace-file again reaches its maximum size, trace-file .0 is renamed trace-file .1 and trace-file is renamed trace-file .0. This renaming scheme continues until the maximum number of trace files is reached. Then the oldest trace file is overwritten.
If you specify a maximum file size, you also must specify a maximum number of trace files with the files option and filename.
world-readable | no-world-readable—(Optional) By default, log files can be accessed only by the user who configures the tracing operation. The world-readable option enables any user to read the file. To explicitly set the default behavior, use the no-world-readable option.
flag—Trace operation to perform. To specify more than one trace operation, include multiple flag statements.
trace—To view this statement in the configuration.
trace-control—To add this statement to the configuration.
- traceoptions {
-
- file
filename {
- <files number >;
- <match regular-expression
>;
- <size maximum-file-size
>;
- <world-readable | no-world-readable>;
- }
- flag all;
- level (all | error | info
| notice | verbose | warning);
- no-remote-trace;
- }
- [edit security idp]
Statement introduced in Release 9.2 of JUNOS software.
Configure IDP tracing options.
This statement is supported on SRX-series devices.
file filename —Name of the file to receive the output of the tracing operation. Enclose the name within quotation marks. All files are placed in the directory /var/log.
files number —(Optional) Maximum number of trace files. When a trace file named trace-file reaches its maximum size, it is renamed to trace-file .0, then trace-file.1 , and so on, until the maximum number of trace files is reached. The oldest archived file is overwritten.
If you specify a maximum number of files, you also must specify a maximum file size with the size option and a filename.
match regular-expression —(Optional) Refine the output to include lines that contain the regular expression.
size maximum-file-size —(Optional) Maximum size of each trace file, in kilobytes (KB), megabytes (MB), or gigabytes (GB). When a trace file named trace-file reaches this size, it is renamed trace-file .0. When the trace-file again reaches its maximum size, trace-file .0 is renamed trace-file .1 and trace-file is renamed trace-file .0. This renaming scheme continues until the maximum number of trace files is reached. Then the oldest trace file is overwritten.
If you specify a maximum file size, you also must specify a maximum number of trace files with the files option and filename.
world-readable | no-world-readable—(Optional) By default, log files can be accessed only by the user who configures the tracing operation. The world-readable option enables any user to read the file. To explicitly set the default behavior, use the no-world-readable option.
flag—Trace operation to perform. To specify more than one trace operation, include multiple flag statements.
level—Set the level of debugging the output option.
no-remote-trace—Set remote tracing as disabled.
trace—To view this statement in the configuration.
trace-control—To add this statement to the configuration.
- traceoptions {
-
- file
filename {
- <files number >;
- <match regular-expression
>;
- <size maximum-file-size
>;
- <world-readable | no-world-readable>;
- }
- flag
flag ;
- }
- [edit security ike]
Statement introduced in Release 8.5 of JUNOS software.
Configure IKE tracing options.
This statement is supported on J-series and SRX-series devices.
file filename —Name of the file to receive the output of the tracing operation. Enclose the name within quotation marks. All files are placed in the directory /var/log.
files number —(Optional) Maximum number of trace files. When a trace file named trace-file reaches its maximum size, it is renamed to trace-file .0, then trace-file.1 , and so on, until the maximum number of trace files is reached. The oldest archived file is overwritten.
If you specify a maximum number of files, you also must specify a maximum file size with the size option and a filename.
match regular-expression —(Optional) Refine the output to include lines that contain the regular expression.
size maximum-file-size —(Optional) Maximum size of each trace file, in kilobytes (KB), megabytes (MB), or gigabytes (GB). When a trace file named trace-file reaches this size, it is renamed trace-file .0. When the trace-file again reaches its maximum size, trace-file .0 is renamed trace-file .1 and trace-file is renamed trace-file .0. This renaming scheme continues until the maximum number of trace files is reached. Then the oldest trace file is overwritten.
If you specify a maximum file size, you also must specify a maximum number of trace files with the files option and filename.
world-readable | no-world-readable—(Optional) By default, log files can be accessed only by the user who configures the tracing operation. The world-readable option enables any user to read the file. To explicitly set the default behavior, use the no-world-readable option.
flag flag—Trace operation to perform. To specify more than one trace operation, include multiple flag statements.
trace—To view this statement in the configuration.
trace-control—To add this statement to the configuration.
- traceoptions {
-
- flag {
- all;
- next-hop-tunnel-binding;
- packet-drops;
- packet-processing;
- security-associations;
- }
- }
- [edit security ipsec]
Statement introduced in Release 8.5 of JUNOS software.
Configure IPsec tracing options.
This statement is supported on J-series and SRX-series devices.
flag—To specify more than one trace operation, include multiple flag statements.
trace—To view this statement in the configuration.
trace-control—To add this statement to the configuration.
- traceoptions {
-
- flag {
- all <extensive>;
- call <extensive>;
-
cc <extensive>;
- decode <extensive>;
- error <extensive>;
- nat <extensive>;
- packet <extensive>;
- rm <extensive>;
- }
- }
- [edit security alg mgcp]
Statement introduced in Release 8.5 of JUNOS software.
Configure Media Gateway Control Protocol (MGCP) tracing options.
This statement is supported on J-series and SRX-series devices.
flag—Trace operation to perform. To specify more than one trace operation, include multiple flag statements.
trace—To view this statement in the configuration.
trace-control—To add this statement to the configuration.
- traceoptions {
-
- file
filename {
- <files number >;
- <match regular-expression
>;
- <size maximum-file-size
>;
- <world-readable | no-world-readable>;
- }
-
- flag {
- all;
- destination-nat-pfe;
- destination-nat-re;
- destination-nat-rt;
- source-nat-pfe;
- source-nat-re;
- source-nat-rt;
- static-nat-pfe;
- static-nat-re;
- static-nat-rt;
- }
- no-remote-trace;
- }
- [edit security nat]
Statement modified in Release 9.3 of JUNOS software.
Configure NAT tracing options.
This statement is supported on SRX-series devices.
filename —By default, the name of the log file that records trace output is the name of the process being traced. Use this option to specify another name.
files number —(Optional) Maximum number of trace files. When a trace file named trace-file reaches its maximum size, it is renamed to trace-file .0, then trace-file.1 , and so on, until the maximum number of trace files is reached. The oldest archived file is overwritten.
If you specify a maximum number of files, you also must specify a maximum file size with the size option and a filename.
match regular-expression —(Optional) Refine the output to include lines that contain the regular expression.
size maximum-file-size —(Optional) Maximum size of each trace file, in kilobytes (KB), megabytes (MB), or gigabytes (GB). When a trace file named trace-file reaches this size, it is renamed trace-file .0. When the trace-file again reaches its maximum size, trace-file .0 is renamed trace-file .1 and trace-file is renamed trace-file .0. This renaming scheme continues until the maximum number of trace files is reached. Then the oldest trace file is overwritten.
If you specify a maximum file size, you also must specify a maximum number of trace files with the files option and filename.
world-readable | no-world-readable—(Optional) By default, log files can be accessed only by the user who configures the tracing operation. The world-readable option enables any user to read the file. To explicitly set the default behavior, use the no-world-readable option.
flag—Trace operation to perform. To specify more than one trace operation, include multiple flag statements.
no-remote-trace—Set remote tracing as disabled.
trace—To view this statement in the configuration.
trace-control—To add this statement to the configuration.
- traceoptions {
- file
filename <files number > <match regular-expression >
- <size maximum-file-size > <world-readable | no-world-readable>;
- flag
flag;
- }
- [edit security nat]
Statement introduced in Release 8.5 of JUNOS software.
Configure NAT tracing options.
This statement is supported on J-series devices.
filename —By default, the name of the log file that records trace output is the name of the process being traced. Use this option to specify another name.
files number —(Optional) Maximum number of trace files. When a trace file named trace-file reaches its maximum size, it is renamed to trace-file .0, then trace-file.1 , and so on, until the maximum number of trace files is reached. The oldest archived file is overwritten.
If you specify a maximum number of files, you also must specify a maximum file size with the size option and a filename.
match regular-expression —(Optional) Refine the output to include lines that contain the regular expression.
size maximum-file-size —(Optional) Maximum size of each trace file, in kilobytes (KB), megabytes (MB), or gigabytes (GB). When a trace file named trace-file reaches this size, it is renamed trace-file .0. When the trace-file again reaches its maximum size, trace-file .0 is renamed trace-file .1 and trace-file is renamed trace-file .0. This renaming scheme continues until the maximum number of trace files is reached. Then the oldest trace file is overwritten.
If you specify a maximum file size, you also must specify a maximum number of trace files with the files option and filename.
world-readable | no-world-readable—(Optional) By default, log files can be accessed only by the user who configures the tracing operation. The world-readable option enables any user to read the file. To explicitly set the default behavior, use the no-world-readable option.
flag—Trace operation to perform. To specify more than one trace operation, include multiple flag statements.
trace—To view this statement in the configuration.
trace-control—To add this statement to the configuration.
- traceoptions {
-
- file
filename
{
- <files number >;
- <match regular-expression
>;
- <size maximum-file-size
>;
- <world-readable | no-world-readable>;
- }
- flag
flag ;
- }
- [edit security pki]
Statement modified in Release 8.5 of JUNOS software.
Configure public key infrastructure (PKI) tracing options.
This statement is supported on J-series and SRX-series devices.
filename —By default, the name of the log file that records trace output is the name of the process being traced. Use this option to specify another name.
files number —(Optional) Specify the maximum number of trace files. When a trace file named trace-file reaches its maximum size, it is renamed to trace-file .0, then trace-file.1 , and so on, until the maximum number of trace files is reached. The oldest archived file is overwritten.
If you specify a maximum number of files, you also must specify a maximum file size with the size option and a filename.
match regular-expression —(Optional) Refine the output to include lines that contain the regular expression.
size maximum-file-size —(Optional) Maximum size of each trace file, in kilobytes (KB), megabytes (MB), or gigabytes (GB). When a trace file named trace-file reaches this size, it is renamed trace-file .0. When the trace-file again reaches its maximum size, trace-file .0 is renamed trace-file .1 and trace-file is renamed trace-file .0. This renaming scheme continues until the maximum number of trace files is reached. Then the oldest trace file is overwritten.
If you specify a maximum file size, you also must specify a maximum number of trace files with the files option and filename.
world-readable | no-world-readable—(Optional) By default, log files can be accessed only by the user who configures the tracing operation. The world-readable option enables any user to read the file. To explicitly set the default behavior, use the no-world-readable option.
flag—Trace operation to perform. To specify more than one trace operation, include multiple flag statements.
trace—To view this statement in the configuration.
trace-control—To add this statement to the configuration.
- traceoptions {
-
- file
filename {
- <files number >;
- <match regular-expression
>;
- <size maximum-file-size
>;
- <world-readable | no-world-readable>;
- }
- flag
flag ;
- }
- [edit security policies]
Statement introduced in Release 8.5 of JUNOS software.
Configure policy tracing options.
This statement is supported on J-series and SRX-series devices.
filename —By default, the name of the log file that records trace output is the name of the process being traced. Use this option to specify another name.
files number —(Optional) Specify the maximum number of trace files. When a trace file named trace-file reaches its maximum size, it is renamed to trace-file .0, then trace-file.1 , and so on, until the maximum number of trace files is reached. The oldest archived file is overwritten.
If you specify a maximum number of files, you also must specify a maximum file size with the size option and a filename.
match regular-expression —(Optional) Refine the output to include lines that contain the regular expression.
size maximum-file-size —(Optional) Maximum size of each trace file, in kilobytes (KB), megabytes (MB), or gigabytes (GB). When a trace file named trace-file reaches this size, it is renamed trace-file .0. When the trace-file again reaches its maximum size, trace-file .0 is renamed trace-file .1 and trace-file is renamed trace-file .0. This renaming scheme continues until the maximum number of trace files is reached. Then the oldest trace file is overwritten.
If you specify a maximum file size, you also must specify a maximum number of trace files with the files option and filename.
world-readable | no-world-readable—(Optional) By default, log files can be accessed only by the user who configures the tracing operation. The world-readable option enables any user to read the file. To explicitly set the default behavior, use the no-world-readable option.
flag—Trace operation to perform. To specify more than one trace operation, include multiple flag statements.
trace—To view this statement in the configuration.
trace-control—To add this statement to the configuration.
- traceoptions {
-
- flag {
- all <extensive>;
- call <extensive>;
-
cc <extensive>;
- cli <extensive>;
- decode <extensive>;
- error <extensive>;
- init <extensive>;
- nat <extensive>;
- rm <extensive>;
- }
- }
- [edit security alg sccp]
Statement introduced in Release 8.5 of JUNOS software.
Configure Skinny Client Control Protocol (SCCP) tracing options.
This statement is supported on J-series devices.
flag —Trace operation to perform. To specify more than one trace operation, include multiple flag statements.
trace—To view this statement in the configuration.
trace-control—To add this statement to the configuration.
- traceoptions {
-
- file
filename {
- <files number >;
- <match regular-expression
>;
- <size maximum-file-size
>;
- <world-readable | no-world-readable>;
- }
-
flag flag ;
- }
- [edit security screen]
Statement introduced in Release 8.5 of JUNOS software.
Configure screen tracing options.
To specify more than one tracing option, include multiple flag statements.
This statement is supported on J-series and SRX-series devices.
filename —By default, the name of the log file that records trace output is the name of the process being traced. Use this option to specify another name.
files number —(Optional) Specify the maximum number of trace files. When a trace file named trace-file reaches its maximum size, it is renamed to trace-file .0, then trace-file.1 , and so on, until the maximum number of trace files is reached. The oldest archived file is overwritten.
If you specify a maximum number of files, you also must specify a maximum file size with the size option and a filename.
match regular-expression —(Optional) Refine the output to include lines that contain the regular expression.
size maximum-file-size —(Optional) Maximum size of each trace file, in kilobytes (KB), megabytes (MB), or gigabytes (GB). When a trace file named trace-file reaches this size, it is renamed trace-file .0. When the trace-file again reaches its maximum size, trace-file .0 is renamed trace-file .1 and trace-file is renamed trace-file .0. This renaming scheme continues until the maximum number of trace files is reached. Then the oldest trace file is overwritten.
If you specify a maximum file size, you also must specify a maximum number of trace files with the files option and filename.
world-readable | no-world-readable—(Optional) By default, log files can be accessed only by the user who configures the tracing operation. The world-readable option enables any user to read the file. To explicitly set the default behavior, use the no-world-readable option.
flag—Trace operation to perform. To specify more than one trace operation, include multiple flag statements.
trace—To view this statement in the configuration.
trace-control—To add this statement to the configuration.
- traceoptions {
-
- file
filename {
- <files number> ;
- <match regular-expression
>;
- <size maximum-file-size
>;
- <world-readable | no-world-readable>;
- }
- flag
flag ;
- no-remote-trace;
- rate-limit rate ;
- }
- [edit security]
Statement modified in Release 8.5 of JUNOS software.
Configure security tracing options.
This statement is supported on J-series and SRX-series devices.
filename —By default, the name of the log file that records trace output is the name of the process being traced. Use this option to specify another name.
files number —(Optional) Specify the maximum number of trace files. When a trace file named trace-file reaches its maximum size, it is renamed to trace-file .0, then trace-file.1 , and so on, until the maximum number of trace files is reached. The oldest archived file is overwritten.
If you specify a maximum number of files, you also must specify a maximum file size with the size option and a filename.
match regular-expression —(Optional) Refine the output to include lines that contain the regular expression.
size maximum-file-size —(Optional) Maximum size of each trace file, in kilobytes (KB), megabytes (MB), or gigabytes (GB). When a trace file named trace-file reaches this size, it is renamed trace-file .0. When the trace-file again reaches its maximum size, trace-file .0 is renamed trace-file .1 and trace-file is renamed trace-file .0. This renaming scheme continues until the maximum number of trace files is reached. Then the oldest trace file is overwritten.
If you specify a maximum file size, you also must specify a maximum number of trace files with the files option and filename.
world-readable | no-world-readable—(Optional) By default, log files can be accessed only by the user who configures the tracing operation. The world-readable option enables any user to read the file. To explicitly set the default behavior, use the no-world-readable option.
flag—Trace operation to perform. To specify more than one trace operation, include multiple flag statements.
no-remote-trace—Set remote tracing as disabled.
rate-limit rate —Number of trace per second. You can configure the incoming rate of trace messages.
trace—To view this statement in the configuration.
trace-control—To add this statement to the configuration.
- traceoptions {
-
- flag {
- all <detail | extensive
| terse>;
- call <detail | extensive
| terse>;
-
cc <detail | extensive | terse>;
- nat <detail | extensive
| terse>;
- parser <detail | extensive
| terse>;
- rm <detail | extensive
| terse>;
- }
- }
- [edit security alg sip]
Statement introduced in Release 8.5 of JUNOS software.
Configure Session Initiation Protocol (SIP) tracing options.
This statement is supported on J-series devices.
flag —Trace operation to perform. To specify more than one trace operation, include multiple flag statements.
detail—Display moderate amount of data in trace.
extensive—Display extensive amount of data in trace.
terse—Display minimum amount of data in trace.
trace—To view this statement in the configuration.
trace-control—To add this statement to the configuration.