You can use the ssadm debug_level command to control the printing of debugging information from the SunScreen kernel.
If you type the command with no arguments, ssadm debug_level displays the current debug-level mask. By default, this mask has a value of 1, which means it reports only significant errors.
If you specify a hexadecimal number as an argument for ssadm debug_level, the command sets the kernel debugging mask to that level.
To list the debugging bit choices, type the following:
# ssadm debug_level ? |
Select a ssadm debug_level mask by setting all of the debugging bits in which you are interested.
Probably the most useful example of the ssadm debug_level debugging bit is DEFAULT_DROP.