SunScreen 3.2 Administration Guide

Troubleshooting

You can use the ssadm debug_level command to control the printing of debugging information from the SunScreen kernel.

If you type the command with no arguments, ssadm debug_level displays the current debug-level mask. By default, this mask has a value of 1, which means it reports only significant errors.

If you specify a hexadecimal number as an argument for ssadm debug_level, the command sets the kernel debugging mask to that level.

To Use the ssadm debug_level Command
  1. To list the debugging bit choices, type the following:


    # ssadm debug_level ?
    

  2. Select a ssadm debug_level mask by setting all of the debugging bits in which you are interested.

Probably the most useful example of the ssadm debug_level debugging bit is DEFAULT_DROP.