Fortinet black logo

CLI Reference

debug asan

debug asan

Use this command to collect memory violation events.

To use this command, your administrator account’s access control profile requires r permission to the mntgrp area. For details, see Permissions.

Syntax

diagnose debug asan <program> {enable | disable}

Variable Description Default

<program>

Enter the name of program for which you want to collect the memory violation events.

You can run diagnose debug asan show to check all the programs that support ASAN and their corresponding enable/disable state.

no default

{enable | disable}

enable

When enabled, the system will perform the following actions (using proxyd as an example):

1. Backup "/bin/proxyd" to "/bin/proxyd.bak"

2. Create symbolic link between "/bin/proxyd" and "/var/log/debug/symbol/asan/bin/proxyd"

3. Kill proxyd

This cause the proxyd daemon to respawn with the ASAN version. You leave the system in its state and let the ASAN version of proxyd daemon run and collect memory violation events.

Please note the changes above is not persistent across reboot. If the system is reloaded, the normal version of daemon will be running.

disable

Once the data is collected, you use disable to revert back to the normal daemon. The system will perform the following actions (using proxyd as an example):

1. Rename "/bin/proxyd.bak" to "/bin/proxyd"

2. Kill proxyd

This cause the daemon to respawn with the original executable.

Please note that respawning will cause traffic interruption.

disable

debug asan

Use this command to collect memory violation events.

To use this command, your administrator account’s access control profile requires r permission to the mntgrp area. For details, see Permissions.

Syntax

diagnose debug asan <program> {enable | disable}

Variable Description Default

<program>

Enter the name of program for which you want to collect the memory violation events.

You can run diagnose debug asan show to check all the programs that support ASAN and their corresponding enable/disable state.

no default

{enable | disable}

enable

When enabled, the system will perform the following actions (using proxyd as an example):

1. Backup "/bin/proxyd" to "/bin/proxyd.bak"

2. Create symbolic link between "/bin/proxyd" and "/var/log/debug/symbol/asan/bin/proxyd"

3. Kill proxyd

This cause the proxyd daemon to respawn with the ASAN version. You leave the system in its state and let the ASAN version of proxyd daemon run and collect memory violation events.

Please note the changes above is not persistent across reboot. If the system is reloaded, the normal version of daemon will be running.

disable

Once the data is collected, you use disable to revert back to the normal daemon. The system will perform the following actions (using proxyd as an example):

1. Rename "/bin/proxyd.bak" to "/bin/proxyd"

2. Kill proxyd

This cause the daemon to respawn with the original executable.

Please note that respawning will cause traffic interruption.

disable