Fortinet white logo
Fortinet white logo

CLI Reference

diagnose sniffer

diagnose sniffer

Sniffer command.

This topic includes the following commands:

diagnose sniffer dpdk

Sniff packets on Rx/Tx of DPDK interfaces. (DPDK Sniffing Mode)

diagnose sniffer dpdk <interface> <filter> <verbose> <count> <tsformat> <frame size>

Parameter

Description

Type

Size

<interface>

Network interface to sniff (or "any").

string

<filter>

Flexible logical filters for sniffer (or "none"). For example: To print UDP 1812 traffic between forti1 and either forti2 or forti3 'udp and port 1812 and host forti1 and ( forti2 or forti3 )'

string

<verbose>

1: print header of packets 2: print header and data from ip of packets 3: print header and data from ethernet of packets (if available) 4: print header of packets with interface name 5: print header and data from ip of packets with interface name 6: print header and data from ethernet of packets (if available) with intf name

string

<count>

Sniffer count.

string

<tsformat>

Format of timestamp. a: absolute UTC time, yyyy-mm-dd hh:mm:ss.ms l: absolute LOCAL time, yyyy-mm-dd hh:mm:ss.ms otherwise: relative to the start of sniffing, ss.ms

string

<frame size>

Set the frame size that is printed before truncation. Defaults to the interface MTU.

string

diagnose sniffer migsock

Sniff migsock packets.

diagnose sniffer migsock

diagnose sniffer migsock debug-trace

Enable/disable debug trace.

diagnose sniffer migsock debug-trace

diagnose sniffer migsock debug-trace disable

Disable debug trace.

diagnose sniffer migsock debug-trace disable

diagnose sniffer migsock debug-trace enable

Enable debug trace.

diagnose sniffer migsock debug-trace enable

diagnose sniffer migsock filter

Filter flow.

diagnose sniffer migsock filter

diagnose sniffer migsock ssl-trace

Enable/disable SSL trace.

diagnose sniffer migsock ssl-trace

diagnose sniffer migsock ssl-trace disable

Disable SSL trace.

diagnose sniffer migsock ssl-trace disable

diagnose sniffer migsock ssl-trace enable

Enable SSL trace.

diagnose sniffer migsock ssl-trace enable

diagnose sniffer migsock start

Start sniffer.

diagnose sniffer migsock start

diagnose sniffer migsock timestamp

Enable/disable timestamp trace.

diagnose sniffer migsock timestamp

diagnose sniffer migsock timestamp disable

Disable timestamp trace.

diagnose sniffer migsock timestamp disable

diagnose sniffer migsock timestamp enable

Enable timestamp trace.

diagnose sniffer migsock timestamp enable

diagnose sniffer packet

Sniff packets.

diagnose sniffer packet <interface> <filter> <verbose> <count> <tsformat> <frame size>

Parameter

Description

Type

Size

<interface>

Network interface to sniff (or "any").

string

<filter>

Flexible logical filters for sniffer (or "none"). For example: To print UDP 1812 traffic between forti1 and either forti2 or forti3 'udp and port 1812 and host forti1 and ( forti2 or forti3 )'

string

<verbose>

1: print header of packets 2: print header and data from ip of packets 3: print header and data from ethernet of packets (if available) 4: print header of packets with interface name 5: print header and data from ip of packets with interface name 6: print header and data from ethernet of packets (if available) with intf name

string

<count>

Sniffer count.

string

<tsformat>

Format of timestamp. a: absolute UTC time, yyyy-mm-dd hh:mm:ss.ms l: absolute LOCAL time, yyyy-mm-dd hh:mm:ss.ms otherwise: relative to the start of sniffing, ss.ms

string

<frame size>

Set the frame size that is printed before truncation. Defaults to the interface MTU.

string

diagnose sniffer

diagnose sniffer

Sniffer command.

This topic includes the following commands:

diagnose sniffer dpdk

Sniff packets on Rx/Tx of DPDK interfaces. (DPDK Sniffing Mode)

diagnose sniffer dpdk <interface> <filter> <verbose> <count> <tsformat> <frame size>

Parameter

Description

Type

Size

<interface>

Network interface to sniff (or "any").

string

<filter>

Flexible logical filters for sniffer (or "none"). For example: To print UDP 1812 traffic between forti1 and either forti2 or forti3 'udp and port 1812 and host forti1 and ( forti2 or forti3 )'

string

<verbose>

1: print header of packets 2: print header and data from ip of packets 3: print header and data from ethernet of packets (if available) 4: print header of packets with interface name 5: print header and data from ip of packets with interface name 6: print header and data from ethernet of packets (if available) with intf name

string

<count>

Sniffer count.

string

<tsformat>

Format of timestamp. a: absolute UTC time, yyyy-mm-dd hh:mm:ss.ms l: absolute LOCAL time, yyyy-mm-dd hh:mm:ss.ms otherwise: relative to the start of sniffing, ss.ms

string

<frame size>

Set the frame size that is printed before truncation. Defaults to the interface MTU.

string

diagnose sniffer migsock

Sniff migsock packets.

diagnose sniffer migsock

diagnose sniffer migsock debug-trace

Enable/disable debug trace.

diagnose sniffer migsock debug-trace

diagnose sniffer migsock debug-trace disable

Disable debug trace.

diagnose sniffer migsock debug-trace disable

diagnose sniffer migsock debug-trace enable

Enable debug trace.

diagnose sniffer migsock debug-trace enable

diagnose sniffer migsock filter

Filter flow.

diagnose sniffer migsock filter

diagnose sniffer migsock ssl-trace

Enable/disable SSL trace.

diagnose sniffer migsock ssl-trace

diagnose sniffer migsock ssl-trace disable

Disable SSL trace.

diagnose sniffer migsock ssl-trace disable

diagnose sniffer migsock ssl-trace enable

Enable SSL trace.

diagnose sniffer migsock ssl-trace enable

diagnose sniffer migsock start

Start sniffer.

diagnose sniffer migsock start

diagnose sniffer migsock timestamp

Enable/disable timestamp trace.

diagnose sniffer migsock timestamp

diagnose sniffer migsock timestamp disable

Disable timestamp trace.

diagnose sniffer migsock timestamp disable

diagnose sniffer migsock timestamp enable

Enable timestamp trace.

diagnose sniffer migsock timestamp enable

diagnose sniffer packet

Sniff packets.

diagnose sniffer packet <interface> <filter> <verbose> <count> <tsformat> <frame size>

Parameter

Description

Type

Size

<interface>

Network interface to sniff (or "any").

string

<filter>

Flexible logical filters for sniffer (or "none"). For example: To print UDP 1812 traffic between forti1 and either forti2 or forti3 'udp and port 1812 and host forti1 and ( forti2 or forti3 )'

string

<verbose>

1: print header of packets 2: print header and data from ip of packets 3: print header and data from ethernet of packets (if available) 4: print header of packets with interface name 5: print header and data from ip of packets with interface name 6: print header and data from ethernet of packets (if available) with intf name

string

<count>

Sniffer count.

string

<tsformat>

Format of timestamp. a: absolute UTC time, yyyy-mm-dd hh:mm:ss.ms l: absolute LOCAL time, yyyy-mm-dd hh:mm:ss.ms otherwise: relative to the start of sniffing, ss.ms

string

<frame size>

Set the frame size that is printed before truncation. Defaults to the interface MTU.

string