Module 'WS_SIP' (Web Intelligence VoIP SIP Parser)

Syntax

• On the Security Gateway Dedicated Check Point server that runs Check Point software to inspect traffic and enforce Security Policies for connected network resources. / each Cluster Member Security Gateway that is part of a cluster., run in the Expert mode:

  fw ctl debug -m WS_SIP + {all | <List of Debug Flags>}

• On the Scalable Platform Security Group, run in the Expert mode:

  g_fw ctl debug -m WS_SIP + {all | <List of Debug Flags>}

Flag	Description
address	Information about connection's IP address
body	HTTP body (content) layer
connection	Connection layer
cookie	HTTP cookie header
coverage	Coverage times (entering, blocking, and time spent)
crumb	Currently is not used
error	General errors
event	Events
fatal	Fatal errors
flow	Currently is not used
global	Handling of global structure (usually, related to policy)
hpack	Processing of HTTP/2 HPACK header compression
http2	Processing of HTTP/2 packets
info	General information
ioctl	IOCTL control messages (communication between the kernel and daemons, loading and unloading of the FireWall)
mem_pool	Memory pool allocation operations
memory	Memory allocation operations
module	Operations in the Web Intelligence VoIP SIP Parser module (initialization, module loading, calls to the module, policy loading, and so on)
parser	HTTP header parser layer
parser_err	HTTP header parsing errors
pfinder	Pattern finder
pkt_dump	Packet dump
policy	Policy (installation and enforcement)
regexp	Regular Expression library
report_mgr	Report manager (errors and logs)
session	Session layer
spii	Stateful Protocol Inspection Infrastructure (INSPECT streaming)
ssl_insp	HTTPS Inspection Feature on a Security Gateway that inspects traffic encrypted by the Secure Sockets Layer (SSL) protocol for malware or suspicious patterns. Synonym: SSL Inspection. Acronyms: HTTPSI, HTTPSi.
sslt	SSL Tunneling (SSLT)
stat	Memory usage statistics
stream	Stream virtualization
subject	Prints the debug subject of each debug message
timestamp	Prints the timestamp for each debug message (changes when you enable the debug flag 'coverage')
uuid	Session UUID
vs	Prints the VSID of the debugged Virtual System
warning	General warnings