Module "kiss" (Kernel Infrastructure)

Syntax

• On the Security Gateway Dedicated Check Point server that runs Check Point software to inspect traffic and enforce Security Policies for connected network resources. / each Cluster Member Security Gateway that is part of a cluster., run in the Expert mode:

  fw ctl debug -m kiss + {all | <List of Debug Flags>}

• On the Scalable Platform Security Group A logical group of Security Appliances (in Maestro) / Security Gateway Modules (on Scalable Chassis) that provides Active/Active cluster functionality. A Security Group can contain one or more Security Appliances / Security Gateway Modules. Security Groups work separately and independently from each other. To the production networks, a Security Group appears a single Security Gateway. In Maestro, each Security Group contains: (A) Applicable Uplink ports, to which your production networks are connected; (B) Security Appliances (the Quantum Maestro Orchestrator determines the applicable Downlink ports automatically); (C) Applicable management port, to which the Check Point Management Server is connected., run in the Expert mode:

  g_fw ctl debug -m kiss + {all | <List of Debug Flags>}

Note - In addition, see Module "kissflow" (Kernel Infrastructure Flow).

Flag	Description
accel_pm	Accelerated Pattern Matcher
bench	CPU benchmark
connstats	Statistics for connections
cookie	Virtual de-fragmentation , cookie issues (cookies in the data structure that holds the packets)
dbg_filter	Information about the configured Debug Filters - Kernel Debug Filters
dfa	Pattern Matcher (Deterministic Finite Automaton) compilation and execution
driver	Loading / unloading of the FireWall driver
error	General errors
flofiler	FLow prOFILER
ghtab	Multi-threaded safe global hash tables
ghtab_bl	Internal operations on global hash tables
handles	Memory pool allocation for tables
htab	Multi-threaded safe hash tables
htab_bl	Internal operations on hash tables
htab_bl_err	Errors and failures during internal operations on hash tables
htab_bl_exp	Expiration in hash tables
htab_bl_infra	Errors and failures during internal operations on hash tables
htab_bl_warn	Warnings during internal operations on hash tables
ioctl	IOCTL control messages (communication between the kernel and daemons)
kqstats	Kernel Worker thread statistics (resetting, initializing, turning off)
kw	Kernel Worker state and Pattern Matcher inspection
leak	Memory leak detection mechanism
memory	Memory allocation operations
memprof	Memory allocation operations in the Memory Profiler (when the kernel parameter fw_conn_mem_prof_enabled=1)
misc	CPU counters, Memory counters, getting/setting of global kernel parameters
mtctx	Multi-threaded context - memory allocation, reference count
packet	Internal parsing operations on packets
pcre	Perl Compatible Regular Expressions (execution, memory allocation)
pm	Pattern Matcher compilation and execution
pmdump	Pattern Matcher DFA (dumping XMLs of DFAs)
pmint	Pattern Matcher compilation
pools	Memory pool allocation operations
queue	Kernel Worker thread queues
rem	Regular Expression Matcher - Pattern Matcher 2nd tier (slow path)
salloc	System Memory allocation
shmem	Shared Memory allocation
sm	String Matcher - Pattern Matcher 1st tier (fast path)
stat	Statistics for categories and maps
swblade	Registration of Software Blades
thinnfa	Currently is not used
thread	Kernel thread that supplies low level APIs to the kernel thread
timers	Internal timers
usrmem	User Space platform memory usage
vbuf	Virtual buffer
warning	General warnings
worker	Kernel Worker - queuing and dequeuing
zeco	Memory allocations in the Zero-Copy kernel module