SRX

 View Only
last person joined: 18 hours ago 

Ask questions and share experiences about the SRX Series, vSRX, and cSRX.
  • 1.  monitoring security flow trouble starting

    Posted 08-13-2017 21:39

    Hi All,

     

    I'm trying to debug some traffic and I've always done the method of setting up packet filters in edit mode with a commit.  However I've discovered the monitor security flow commands today, however when I try and start the monitor I get an error.

     

     monitor security flow start
    node0:
    --------------------------------------------------------------------------
    error: There is another flow debugging session which is running.
    
    

    How can I find out what the other debug session is ?  I thought it was an old packet filter, so I stopped that, well I think I'm sure I stopped it.  

     

    I do have a firewall filter running with a counter if that help?  

     

    thanks for any help in working this out.

     



  • 2.  RE: monitoring security flow trouble starting

    Posted 08-16-2017 04:35

    "show monitor security flow" to display details about the monitoring operation.

    You can delete filters using the "clear monitor security flow filter" command.  monitor security flow start and monitor security flow stop commands to enable and disable monitoring.



  • 3.  RE: monitoring security flow trouble starting

    Posted 08-16-2017 19:15

    Hi,

     

    I've had a look at that and I get the following:

     

    > show monitor security flow
    node0:
    --------------------------------------------------------------------------
    Monitor security flow session status: Inactive
    Monitor security flow trace file: /var/log/test-file.log
    Monitor security flow filters: 0
    

    I've run the clear command as well, but still no luck.

     

    In my conf file the only thing i hav matching either monitor or flow are:

     

    flow {
            traceoptions {
                trace-level {
                    detail;
                }
            }
        }

    and interface monitoring.

     

    I've also run the command on node1 and its the same as above.  Feel like a reboot is in order, but can't really do that without change controls.

     

    thanks for helping



  • 4.  RE: monitoring security flow trouble starting
    Best Answer

    Posted 08-17-2017 00:05

    Can you delete following lines and then check ?

    flow {
            traceoptions {
                trace-level {
                    detail;
                }
            }
        }

     

     



  • 5.  RE: monitoring security flow trouble starting

    Posted 08-17-2017 22:09

    Hi Arunsamy,

     

    Yep, deleting that part of the config was the answer.  thanks