How to Obtain Tracelogs from the CLI

03/26/2020 71 People found this article helpful 31,953 Views

Download

Print

Translations

• Italian

Share

• LinkedIn
• Twitter
• Facebook
• Email
• Copy URL The link has been copied to clipboard

Description

Technical support engineers at SonicWall require console logs to be provided for analysis when the device isn't responding via GUI or through any LAN/WAN interfaces . When the firewall locks up or becomes unresponsive there are some files, if gathered from firewall console at the time it locks up, that can help a support engineer find the probable root cause of the reported issue.

This article explains what commands should be used when a firewall locks up or becomes inaccessible via the GUI.

Resolution

This article will use Putty client to gather key information over SSH connection.

1. Log in to SonicWall Firewall via Putty or another terminal emulator program.
2. To save the console output to a file browse to Session | logging.
3. Select option All session output under Session logging and locate a path for file to be saved as .txt.
4. Select the radio button Always append to the end of it and ensure  Flush log file frequently box is unchecked.
   
   
   
   
5. Click on the session from the left hand side and type the IP address of the SonicWall under Host name and ensure SSH is selected under "Connection Type"
6. Serial connection type should be selected if Firewall is connected via a console cable connection.
7. Click on the Open to connect to the appliance via SSH and wait for username prompt, enter username/password and wait for the command line prompt to appear.

For 5.6.0.x firmware and up to 5.8.1.x

show tracelog current
show tracelog last
show tracelog all
show tech-support 

Note: On a serial 115k connection, show tech-support command can slow down the firewall so if firewall is taking time to print a command output then avoid running this command, and contact the SonicWall Support Team for further assistance.

show cpu  (search for the process and see which process has highest cpu usage )



stacktrace "process name"  without " "
for example use
stacktrace zNSM
(Please run the above command for 10 to 15 times)

show mem-pools
show memory
show memzone
show fpa
show log.

For 5.9.0.x firmware versions

show tech-support

diag show tracelog current
diag show tracelog last
diag show tracelog all

diag show cpu
diag show process "process name"  without " "

(Please run the above command for 10 to 15 times)

?diag show mem-pools
diag show cp-stats
diag show memory
diag show memzone
diag show fpa
show log view

For 6.1.1.X firmware versions 6.1.2.0 and 6.2.x.x

show tech-support
diag show tracelog current
diag show tracelog last
diag show tracelog all

diag show cpu
diag show process "process name"  without " "
(Please run the above command for 10 to 15 times)

diag show mem-pools
diag show cp-stats
diag show memory
diag show memzone
?diag show fpa

diag show log

Attach the file which was saved for saving the console output to the support case for analysis.

Related Articles

• Troubleshooting Single Sign-on (SSO) related errors
• How to enable and configure NTP?
• Cannot edit App Control Signatures, "Error: property 'value' can't be empty value"

Categories

• Firewalls > TZ Series
• Firewalls > SonicWall SuperMassive E10000 Series
• Firewalls > SonicWall SuperMassive 9000 Series
• Firewalls > SonicWall NSA Series