Fortinet black logo

Administration Guide

Creating a packet capture filter

Creating a packet capture filter

To create a packet capture filter:
  1. Go to Network > Packet Capture.
  2. Select +Create New.

    The New Packet Capture Filter window opens.

  3. Enter the following information:

    Interface

    Select or create a new interface.

    Use the search bar to look for an interface.

    Use the pen icon next to an interface to edit the interface.

    Maximum Captured Packets

    Enter how many packets to collect (default = 4000, 1 - 1000000).

    Filters

    Enable Filters, you can create filters for host names, ports, VLAN identifiers, and protocols.

    Use commas to separate items. Use a hyphen to specify a range.

    Note: The option is disabled by default.

    Include Non-IP Packets

    Select this option if you want to include packets from non-IP protocols.

    Note: The option is disabled by default.

    API Preview

    The API Preview allows you to view all REST API requests being used by the page. You can make changes on the page that are reflected in the API request preview.

    This feature is not available if the user is logged in as an administrator that has read-only GUI permissions.

  4. Click OK.
To use API preview:
  1. Click API Preview.

    The API Preview pane opens, and the values for the fields are visible (data). If a new object is being created, the POST request is shown.

  2. Enable Show modified changes only (enabled by default) to show the modified changes instead of the full configuration in the preview.
  3. Click Copy to Clipboard to copy the JSON code shown on the preview screen to the clipboard.
  4. Click Close to leave the preview.

Creating a packet capture filter

To create a packet capture filter:
  1. Go to Network > Packet Capture.
  2. Select +Create New.

    The New Packet Capture Filter window opens.

  3. Enter the following information:

    Interface

    Select or create a new interface.

    Use the search bar to look for an interface.

    Use the pen icon next to an interface to edit the interface.

    Maximum Captured Packets

    Enter how many packets to collect (default = 4000, 1 - 1000000).

    Filters

    Enable Filters, you can create filters for host names, ports, VLAN identifiers, and protocols.

    Use commas to separate items. Use a hyphen to specify a range.

    Note: The option is disabled by default.

    Include Non-IP Packets

    Select this option if you want to include packets from non-IP protocols.

    Note: The option is disabled by default.

    API Preview

    The API Preview allows you to view all REST API requests being used by the page. You can make changes on the page that are reflected in the API request preview.

    This feature is not available if the user is logged in as an administrator that has read-only GUI permissions.

  4. Click OK.
To use API preview:
  1. Click API Preview.

    The API Preview pane opens, and the values for the fields are visible (data). If a new object is being created, the POST request is shown.

  2. Enable Show modified changes only (enabled by default) to show the modified changes instead of the full configuration in the preview.
  3. Click Copy to Clipboard to copy the JSON code shown on the preview screen to the clipboard.
  4. Click Close to leave the preview.