CLI command: debug

notempty

Dieser Artikel bezieht sich auf eine nicht mehr aktuelle Version!

notempty

Der Artikel für die neueste Version steht hier

notempty

Zu diesem Artikel gibt es bereits eine neuere Version, die sich allerdings auf eine Beta-Version bezieht

Last adaption: 05.2024

New:

• command debug show validators added

Last updated: 

09.2025
• Beschreibung der Befehle verbessert und irreführendes Beispiel ersetzt

notempty

This article refers to a Beta version

-

Access: UTM-IP:Port or UTM-URL:Port
Port as configured at Network / Appliance Settings / Webserver
Default-Port: 11115
i.e.: https://utm.ttt-point.de:11115
Default: https://192.168.175.1:11115 Extras CLI

---

Command	Parameter	Description	Example
debug kmod debug kmod load debug kmod load		Loads a kernel module	debug kmod load module hv_netvsc params 128
	module	The modules name
	params	Parameter that is transferred
debug kmod unload debug kmod unload		Unloads a kernel module and places it on a blocklist	debug kmod unload module hv_netvsc
	module	The modules name
debug kmod delete debug kmod delete		Removes a kernel module from the blocklist after a reboot	debug kmod delete module hv_netvsc
	module	The modules name
debug kmod list debug kmod list		List of all currently loaded kernel modules	debug kmod list
debug kmod get debug kmod get		List of modules unloaded/loaded via debug kmod command	debug kmod get
debug show debug show validators debug show validators		List of variable types that are available as EXTC variables	debug show validators

Example for removing kernel modules used for VoIP from the block list:

In an earlier version of this page, the command debug kmod unload module was used to unload supposedly disruptive SIP helpers. However, as of version 14.1.0, this means that packet filter rules can no longer be written completely or updated when the “sip” service is used.

cli>
debug kmod delete module nf_nat_sip
debug kmod delete module nf_nat_h323
debug kmod delete module nf_conntrack_sip
debug kmod delete module nf_conntrack_h323
 
system reboot

Loading the SIP helper via CLI is from version 12.2.0 no longer necessary.
This happens automatically with the use of the VoIP service group or the sip service in the packet filter.
Further details under VoIP FAQ