Module "RTM" (Real Time Monitoring)

Syntax

• On the Security Gateway Dedicated Check Point server that runs Check Point software to inspect traffic and enforce Security Policies for connected network resources. / each Cluster Member Security Gateway that is part of a cluster., run in the Expert mode:

  fw ctl debug -m RTM + {all | <List of Debug Flags>}

• On the Scalable Platform Security Group A logical group of Security Appliances (in Maestro) / Security Gateway Modules (on Scalable Chassis) that provides Active/Active cluster functionality. A Security Group can contain one or more Security Appliances / Security Gateway Modules. Security Groups work separately and independently from each other. To the production networks, a Security Group appears a single Security Gateway. In Maestro, each Security Group contains: (A) Applicable Uplink ports, to which your production networks are connected; (B) Security Appliances (the Quantum Maestro Orchestrator determines the applicable Downlink ports automatically); (C) Applicable management port, to which the Check Point Management Server is connected., run in the Expert mode:

  g_fw ctl debug -m RTM + {all | <List of Debug Flags>}

Flag	Description
accel	Prints SecureXL Check Point product on a Security Gateway that accelerates IPv4 and IPv6 traffic that passes through a Security Gateway. information about the accelerated packets, connections, and so on
chain	Prints information about chain registration and about the E2E (Virtual Link) chain function actions Note - This important debug flag helps you know, whether the E2E identifies the Virtual Link packets
con_conn	Prints messages for each connection (when a new connection is handled by the RTM module) The same debug flags as 'per_conn'
driver	Check Point kernel attachment (access to kernel is shown as log entries)
err	General errors
import	Importing of the data from other kernel modules (FireWall, QoS Check Point Software Blade on a Security Gateway that provides policy-based traffic bandwidth management to prioritize business-critical traffic and guarantee bandwidth and control latency.)
init	Initialization of the RTM module
ioctl	IOCTL control messages
netmasks	Information about how the RTM handles netmasks, if you are monitoring an object of type Network
per_conn	Prints messages for each connection (when a new connection is handled by the RTM module) The same debug flags as 'con_conn'
per_pckt	Prints messages for each packet (when a new packet arrives) Warning - Prints many messages, which increases the load on the CPU
performance	Currently is not used
policy	Prints messages about loading and unloading on the FireWall module (indicates that the RTM module received the FireWall callback)
rtm	Real time monitoring
s_err	General errors about kernel tables and other failures
sort	Sorting of "Top XXX" counters
special	Information about how the E2E modifies the E2ECP protocol packets
tabs	Currently is not used
topo	Calculation of network topography
view_add	Adding or deleting of a View
view_update	Updating of Views with new information
view_update1	Updating of Views with new information
wd	WebDefense views