diagnose sniffer
Sniffer command.
This topic includes the following commands:
- diagnose sniffer dpdk
- diagnose sniffer migsock
- diagnose sniffer migsock debug-trace
- diagnose sniffer migsock debug-trace disable
- diagnose sniffer migsock debug-trace enable
- diagnose sniffer migsock filter
- diagnose sniffer migsock ssl-trace
- diagnose sniffer migsock ssl-trace disable
- diagnose sniffer migsock ssl-trace enable
- diagnose sniffer migsock start
- diagnose sniffer migsock timestamp
- diagnose sniffer migsock timestamp disable
- diagnose sniffer migsock timestamp enable
- diagnose sniffer packet
diagnose sniffer dpdk
Sniff packets on Rx/Tx of DPDK interfaces. (DPDK Sniffing Mode)
diagnose sniffer dpdk <interface> <filter> <verbose> <count> <tsformat> <frame size>
|
Parameter |
Description |
Type |
Size |
|---|---|---|---|
|
<interface> |
Network interface to sniff (or "any"). |
string |
|
|
<filter> |
Flexible logical filters for sniffer (or "none"). For example: To print UDP 1812 traffic between forti1 and either forti2 or forti3 'udp and port 1812 and host forti1 and ( forti2 or forti3 )' |
string |
|
|
<verbose> |
1: print header of packets 2: print header and data from ip of packets 3: print header and data from ethernet of packets (if available) 4: print header of packets with interface name 5: print header and data from ip of packets with interface name 6: print header and data from ethernet of packets (if available) with intf name |
string |
|
|
<count> |
Sniffer count. |
string |
|
|
<tsformat> |
Format of timestamp. a: absolute UTC time, yyyy-mm-dd hh:mm:ss.ms l: absolute LOCAL time, yyyy-mm-dd hh:mm:ss.ms otherwise: relative to the start of sniffing, ss.ms |
string |
|
|
<frame size> |
Set the frame size that is printed before truncation. Defaults to the interface MTU. |
string |
|
diagnose sniffer migsock
Sniff migsock packets.
diagnose sniffer migsock
diagnose sniffer migsock debug-trace
Enable/disable debug trace.
diagnose sniffer migsock debug-trace
diagnose sniffer migsock debug-trace disable
Disable debug trace.
diagnose sniffer migsock debug-trace disable
diagnose sniffer migsock debug-trace enable
Enable debug trace.
diagnose sniffer migsock debug-trace enable
diagnose sniffer migsock filter
Filter flow.
diagnose sniffer migsock filter
diagnose sniffer migsock ssl-trace
Enable/disable SSL trace.
diagnose sniffer migsock ssl-trace
diagnose sniffer migsock ssl-trace disable
Disable SSL trace.
diagnose sniffer migsock ssl-trace disable
diagnose sniffer migsock ssl-trace enable
Enable SSL trace.
diagnose sniffer migsock ssl-trace enable
diagnose sniffer migsock start
Start sniffer.
diagnose sniffer migsock start
diagnose sniffer migsock timestamp
Enable/disable timestamp trace.
diagnose sniffer migsock timestamp
diagnose sniffer migsock timestamp disable
Disable timestamp trace.
diagnose sniffer migsock timestamp disable
diagnose sniffer migsock timestamp enable
Enable timestamp trace.
diagnose sniffer migsock timestamp enable
diagnose sniffer packet
Sniff packets.
diagnose sniffer packet <interface> <filter> <verbose> <count> <tsformat> <frame size>
|
Parameter |
Description |
Type |
Size |
|---|---|---|---|
|
<interface> |
Network interface to sniff (or "any"). |
string |
|
|
<filter> |
Flexible logical filters for sniffer (or "none"). For example: To print UDP 1812 traffic between forti1 and either forti2 or forti3 'udp and port 1812 and host forti1 and ( forti2 or forti3 )' |
string |
|
|
<verbose> |
1: print header of packets 2: print header and data from ip of packets 3: print header and data from ethernet of packets (if available) 4: print header of packets with interface name 5: print header and data from ip of packets with interface name 6: print header and data from ethernet of packets (if available) with intf name |
string |
|
|
<count> |
Sniffer count. |
string |
|
|
<tsformat> |
Format of timestamp. a: absolute UTC time, yyyy-mm-dd hh:mm:ss.ms l: absolute LOCAL time, yyyy-mm-dd hh:mm:ss.ms otherwise: relative to the start of sniffing, ss.ms |
string |
|
|
<frame size> |
Set the frame size that is printed before truncation. Defaults to the interface MTU. |
string |
|