Interface packet capture
You can perform packet capture on a managed FortiGate's interface through the device database.
For additional information on performing packet capture on FortiGate interfaces, see Using the packet capture tool in the FortiGate/FortiOS Administration Guide.
To perform a packet capture on managed FortiGate interfaces:
-
In Device Manager, select a FortiGate and go to Network> Interfaces.
-
Select an interface, click More > Packet Capture.
-
You can configure the Max Number of Packets and/or Filters, and click OK to start the packet capture.
If Max Number of Packets is not specified, the packet capture will stop after the default maximum supported packets is reached to preserve memory. You can view the default maximum for the interface by hovering your mouse over the info icon. This maximum depends on the device model.
-
Select Graph, Headers, or Packet Data to view details of the packet.
-
Optionally, click Save as PCAP to save the file in the .pcap format.
