Generation of debug information for debugging a network security appliance

• US 7,660,412 B1
• Filed: 12/09/2005
• Issued: 02/09/2010
• Est. Priority Date: 12/09/2005
• Status: Expired due to Fees

• Current Assignee: Trend Micro Inc.
• Original Assignee: Trend Micro Inc.
• Inventors: Lee, Jin-Shi
• Primary Examiner(s): Pich; Ponnoreay
• Application Number:
  US11/298,330
• Time in Patent Office: 1,523 Days
• Field of Search: 380/2, 717/124
• US Class Current: 380/2
• CPC Class Codes: G06F 11/362 Software debugging

Abstract

Debugging of a network security appliance is facilitated by allowing for generation of debug information in a user-friendly manner. In one embodiment, the network security appliance automatically detects a presence of a file in a removable non-volatile memory and, in response, places at least one of its components in debug mode. This allows the component to write debug information to the removable non-volatile memory. Removal of the removable non-volatile memory from the network security appliance automatically triggers placement of the component in non-debug mode. The debug information generated in the network security appliance may be forwarded to a server computer for analysis.

Claims

1. A method of generating debug information, the method comprising:

receiving a file in a first computer over a computer network;

automatically detecting the file in a removable non-volatile memory in a network security appliance separate from the first computer;

in response to detecting the file in the removable non-volatile memory in the network security appliance, placing a component of the network security appliance in debug mode and causing the component to write the debug information into the removable non-volatile memory, wherein the component comprises an antivirus program; and

receiving the debug information in a second computer over the computer network.

2. The method of claim 1 wherein the file comprises debug configuration information with a security code for authentication purposes.

3. The method of claim 1 wherein the second computer comprises a server computer operated by a manufacturer of the network security appliance.

4. The method of claim 1 wherein the removable non-volatile memory comprises a universal serial bus (USB) drive.

5. The method of claim 1 further comprising:

automatically detecting an absence of the file in the network security appliance; and

in response to detecting the absence of the file, placing the component of the network security appliance in non-debug mode from the debug mode.

6. The method of claim 1 wherein the debug information comprises contents of a variable of the antivirus program in the network security appliance.

7. A network security appliance comprising:

an antivirus program configured to scan data for computer viruses, the antivirus program being configured to write debug information to a removable non-volatile memory when placed in debug mode, the debug information comprising information indicative of an internal operation of the antivirus program;

a debug manager configured to automatically detect a presence of a file in a removable non-volatile memory, to place the antivirus program in debug mode upon detection of the presence of the file, and to place the antivirus program in non-debug mode upon automatic detection of an absence of the file; and

a port for accepting the removable non-volatile memory.

8. The network security appliance of claim 7 wherein the network security appliance is configured to not have an attached keyboard or computer screen during normal operation in a customer site.

9. The network security appliance of claim 7 wherein the port comprises a universal serial bus (USB) port.

10. The network security appliance of claim 7 wherein the removable non-volatile memory comprises a universal serial bus (USB) drive.

11. The network security appliance of claim 7 wherein the debug information comprises a content of a variable of the antivirus program.

12. A method of generating debug information for debugging a network security appliance, the method comprising:

reporting a problem with a network security appliance to a customer service center;

receiving a file for troubleshooting the problem, the file being received in a client computer over a computer network, the client computer being physically separate from the network security appliance;

copying the file to a removable non-volatile memory; and

plugging the removable non-volatile memory to the network security appliance to automatically place a component of the network security appliance in debug mode and causing the component to write the debug information to the removable non-volatile memory, wherein the component comprises an antivirus program.

13. The method of claim 12 further comprising:

removing the removable non-volatile memory from the network security appliance to place the component from debug mode to non-debug mode; and

providing the debug information to a server computer over the computer network.

14. The method of claim 12 wherein the removable non-volatile memory comprises a universal serial bus (USB) drive.