show services ssl droplogs
Syntax
show services ssl droplogs pic-info fpc-slot slot number pic-slot slot-number
Description
Display the denied or dropped session details. The messages log file records the details about the dropped packets.
A new field is added in the existing droplog command. The field indicates the version that is negotiated between the client and server when any issue occurs.
Note:
When the CLI is in logical system context mode and you enter an operational-mode command, the output of the command displays information related to the logical system only.
Options
| pic-info fpc0.pic0 fpc-slot slot number pic-slot slot-number | Display the information for the FPC in the specified slot. |
Required Privilege Level
view
Sample Output
command-name
user@host > show services ssl droplogs
Lsys Name : root-logical-system
PIC:fpc0 fpc[0] pic[0]-------
===========log mesg for cpu 0
===========log mesg for cpu 1
log mesg is File: ../../../../../../../../../src/junos/jsf/plugin/ssl/jssl_common.c Function: jssl_X509_verify_cert Line: 3767 Message: unable to get local issuer certificate C2S plugin chain : [Plugin junos-jdpi: action: ignore]-> [Plugin junos-tcp-svr-emul: action: none]-> [Plugin junos-ssl-proxy: action: ignore]-> [Plugin junos-ssl-term: action: none]-> [Plugin junos-dpi-stream: action: none]-> [Plugin junos-idp-stream: action: ignore]-> [Plugin junos-ssl-init: action: none]-> [Plugin junos-tcp-clt-emul: action: none] S2C plugin chain: [Plugin junos-jdpi: action: ignore]-> [Plugin junos-tcp-clt-emul: action: none]-> [Plugin junos-ssl-init: action: none]-> [Plugin junos-dpi-stream: action: none]-> [Plugin junos-idp-stream: action: ignore]-> [Plugin junos-ssl-term: action: none]-> [Plugin junos-ssl-proxy: action: ignore]-> [Plugin junos-tcp-svr-emul: action: none] SourceIP:5.0.0.1 DestIP:4.0.0.1 Source Port:40281 Dest Port:443 source interface:ge-0/0/1.0 Destination interface:ge-0/0/0.0 source zone:untrust destination Zone:trustRelease Information
Command introduced in Junos OS Release 19.3R1.