paloaltonetworks:troubleshooting:flow_basic
Differences
This shows you the differences between two versions of the page.
| Next revision | Previous revision | ||
| paloaltonetworks:troubleshooting:flow_basic [2021/10/21 12:45] – created bstafford | paloaltonetworks:troubleshooting:flow_basic [2022/11/23 12:49] (current) – external edit 127.0.0.1 | ||
|---|---|---|---|
| Line 4: | Line 4: | ||
| Filters: | Filters: | ||
| - | | + | |
| - | | + | |
| - | | + | |
| - | | + | |
| Line 21: | Line 21: | ||
| We would then need to run through the following: | We would then need to run through the following: | ||
| - | | + | |
| - | | + | |
| - | | + | |
| - | > show clock | + | < |
| > set session offload no | > set session offload no | ||
| > debug dataplane packet-diag clear log log | > debug dataplane packet-diag clear log log | ||
| Line 32: | Line 32: | ||
| > debug dataplane packet-diag set log feature proxy basic | > debug dataplane packet-diag set log feature proxy basic | ||
| > debug dataplane packet-diag set log feature ssl basic | > debug dataplane packet-diag set log feature ssl basic | ||
| - | > debug dataplane packet-diag set log on | + | > debug dataplane packet-diag set log on</ |
| 4. Prepare the following commands to run while replicating issue. | 4. Prepare the following commands to run while replicating issue. | ||
| - | > show counter global filter packet-filter yes delta yes | + | < |
| - | > show session all filter source | + | > show session all filter source |
| - | > show session id [id of impacted ssl session] | + | > show session id [id of impacted ssl session]</ |
| 5. Turn packet captures on (for firewall and client/ | 5. Turn packet captures on (for firewall and client/ | ||
| + | |||
| 6. Disable session offloading and flow, and aggregate logs: | 6. Disable session offloading and flow, and aggregate logs: | ||
| - | > debug dataplane packet-diag set log off | + | |
| + | < | ||
| > set session offload yes | > set session offload yes | ||
| - | > debug dataplane packet-diag aggregate-logs | + | > debug dataplane packet-diag aggregate-logs</ |
| (this is important as without this the TSF will not contain the pan_packet_diag.log) | (this is important as without this the TSF will not contain the pan_packet_diag.log) | ||
| 7. Turn off packet captures and generate a fresh Tech Support File. | 7. Turn off packet captures and generate a fresh Tech Support File. | ||
| + | |||
| Apply a source address filter to the traffic log and a time filter for just before the test session. Export these via the button at the top right. Please also gather a screenshot of a couple of the detail log views for the denied traffic. | Apply a source address filter to the traffic log and a time filter for just before the test session. Export these via the button at the top right. Please also gather a screenshot of a couple of the detail log views for the denied traffic. | ||
| - | Please then collect the following information and upload this to our SFTP server: | ||
| - | -Fresh Tech Support File | + | Collect the following information and upload this to the SFTP server: |
| - | -Packet Captures | + | |
| - | -CLI session output | + | |
| - | -Traffic Log and screenshots | + | - Packet Captures |
| - | -Screenshot of filters | + | - CLI session output |
| + | - Traffic Log and screenshots | ||
| + | - Screenshot of filters | ||
paloaltonetworks/troubleshooting/flow_basic.1634820301.txt.gz · Last modified: (external edit)