Module 'WS' (Web Intelligence)

Syntax:

fw ctl debug -m WS + {all | <List of Debug Flags>}

Notes:

  • Also see Module 'WSIS' (Web Intelligence Infrastructure).

  • To print information for all Virtual Systems in the debug output, before you start the kernel debug, set this kernel parameter on the VSX Gateway or each VSX Cluster Member (this is the default behavior):

    # fw ctl set int ws_debug_vs 0

  • To print information for a specific Virtual System in the debug output, before you start the kernel debug, set this kernel parameter on the VSX Gateway or each VSX Cluster Member:

    # fw ctl set int ws_debug_vs <VSID>

  • To print information for all IPv4 addresses in the debug output, before you start the kernel debug, set this kernel parameter on the VSX Gateway or each VSX Cluster Member (this is the default behavior):

    # fw ctl set int ws_debug_ip 0

  • To print information for a specific IPv4 address in the debug output, before you start the kernel debug, set this kernel parameter on the VSX Gateway or each VSX Cluster Member:

    # fw ctl set int ws_debug_ip <XXX.XXX.XXX.XXX>

Flag

Description

address

Information about connection's IP address

body

HTTP body (content) layer

connection

Connection layer

cookie

HTTP cookie header

coverage

Coverage times (entering, blocking, and time spent)

crumb

Currently is not used

error

General errors (the connection is probably rejected)

event

Events

fatal

Fatal errors

flow

Currently is not used

global

Handling of global structure (usually, related to policy)

info

General information

ioctl

IOCTL control messages (communication between the kernel and daemons, loading and unloading of the FireWall)

mem_pool

Memory pool allocation operations

memory

Memory allocation operations

module

Operations in the Web Intelligence module (initialization, module loading, calls to the module, policy loading, and so on)

parser

HTTP header parser layer

parser_err

HTTP header parsing errors

pfinder

Pattern finder

pkt_dump

Packet dump

policy

Policy (installation and enforcement)

regexp

Regular Expression library

report_mgr

Report manager (errors and logs)

session

Session layer

spii

Stateful Protocol Inspection Infrastructure (INSPECT streaming)

ssl_insp

HTTPS Inspection

sslt

SSL Tunneling (SSLT)

stat

Memory usage statistics

stream

Stream virtualization

subject

Prints the debug subject of each debug message

timestamp

Prints the timestamp for each debug message (changes when you enable the debug flag 'coverage')

uuid

Session UUID

vs

Prints the VSID of the debugged Virtual System

warning

General warnings