Fortinet white logo
Fortinet white logo

CLI Reference

diagnose nft

diagnose nft

nft debug options

This topic includes the following commands:

diagnose nft check-status

Print status of nft variables

diagnose nft check-status

diagnose nft force-reset

Forcibly reset nft (destructive)

diagnose nft force-reset

diagnose nft log

Log settings

diagnose nft log

diagnose nft log level

Log level

diagnose nft log level

diagnose nft log level all

Enable all levels

diagnose nft log level all

diagnose nft log level error

error

diagnose nft log level error

diagnose nft log level info

info

diagnose nft log level info

diagnose nft log level off

off

diagnose nft log level off

diagnose nft log level trace

trace

diagnose nft log level trace

diagnose nft log level verbose

verbose

diagnose nft log level verbose

diagnose nft log level warning

warning

diagnose nft log level warning

diagnose nft log reset-all

Reset all log settings to default.

diagnose nft log reset-all

diagnose nft settings

Temporarily change settings

diagnose nft settings

diagnose nft settings log-show-hexdump

Show netlink hexdump as rules are built

diagnose nft settings log-show-hexdump <enable> <disable>

Parameter

Description

Type

Size

<enable>

Enable the setting

string

<disable>

Disable the setting

string

diagnose nft settings log-show-ruledump

Show ruleset as it gets built

diagnose nft settings log-show-ruledump <enable> <disable>

Parameter

Description

Type

Size

<enable>

Enable the setting

string

<disable>

Disable the setting

string

diagnose nft settings optimizer-batch-submit

Reduce kernel overhead by minimizing submissions

diagnose nft settings optimizer-batch-submit <enable> <disable>

Parameter

Description

Type

Size

<enable>

Enable the setting

string

<disable>

Disable the setting

string

diagnose nft settings optimizer-clean-rules

Remove unnecessary rule expressions

diagnose nft settings optimizer-clean-rules <enable> <disable>

Parameter

Description

Type

Size

<enable>

Enable the setting

string

<disable>

Disable the setting

string

diagnose nft settings optimizer-dedup-rules

Deduplicate rules

diagnose nft settings optimizer-dedup-rules <enable> <disable>

Parameter

Description

Type

Size

<enable>

Enable the setting

string

<disable>

Disable the setting

string

diagnose nft settings optimizer-inline-jumps

Collapse multiple simple rules into one rule

diagnose nft settings optimizer-inline-jumps <enable> <disable>

Parameter

Description

Type

Size

<enable>

Enable the setting

string

<disable>

Disable the setting

string

diagnose nft settings reset

Reset to default settings

diagnose nft settings reset

diagnose nft settings show

Show current settings

diagnose nft settings show

diagnose nft show

Show rules loaded in kernel

diagnose nft show <table>

Parameter

Description

Type

Size

<table>

Filter by table name (optional)

string

diagnose nft update

Request an update - omit arguments to update all

diagnose nft update <hook>

Parameter

Description

Type

Size

<hook>

Hook mask (hex; optional)

string

diagnose nft

diagnose nft

nft debug options

This topic includes the following commands:

diagnose nft check-status

Print status of nft variables

diagnose nft check-status

diagnose nft force-reset

Forcibly reset nft (destructive)

diagnose nft force-reset

diagnose nft log

Log settings

diagnose nft log

diagnose nft log level

Log level

diagnose nft log level

diagnose nft log level all

Enable all levels

diagnose nft log level all

diagnose nft log level error

error

diagnose nft log level error

diagnose nft log level info

info

diagnose nft log level info

diagnose nft log level off

off

diagnose nft log level off

diagnose nft log level trace

trace

diagnose nft log level trace

diagnose nft log level verbose

verbose

diagnose nft log level verbose

diagnose nft log level warning

warning

diagnose nft log level warning

diagnose nft log reset-all

Reset all log settings to default.

diagnose nft log reset-all

diagnose nft settings

Temporarily change settings

diagnose nft settings

diagnose nft settings log-show-hexdump

Show netlink hexdump as rules are built

diagnose nft settings log-show-hexdump <enable> <disable>

Parameter

Description

Type

Size

<enable>

Enable the setting

string

<disable>

Disable the setting

string

diagnose nft settings log-show-ruledump

Show ruleset as it gets built

diagnose nft settings log-show-ruledump <enable> <disable>

Parameter

Description

Type

Size

<enable>

Enable the setting

string

<disable>

Disable the setting

string

diagnose nft settings optimizer-batch-submit

Reduce kernel overhead by minimizing submissions

diagnose nft settings optimizer-batch-submit <enable> <disable>

Parameter

Description

Type

Size

<enable>

Enable the setting

string

<disable>

Disable the setting

string

diagnose nft settings optimizer-clean-rules

Remove unnecessary rule expressions

diagnose nft settings optimizer-clean-rules <enable> <disable>

Parameter

Description

Type

Size

<enable>

Enable the setting

string

<disable>

Disable the setting

string

diagnose nft settings optimizer-dedup-rules

Deduplicate rules

diagnose nft settings optimizer-dedup-rules <enable> <disable>

Parameter

Description

Type

Size

<enable>

Enable the setting

string

<disable>

Disable the setting

string

diagnose nft settings optimizer-inline-jumps

Collapse multiple simple rules into one rule

diagnose nft settings optimizer-inline-jumps <enable> <disable>

Parameter

Description

Type

Size

<enable>

Enable the setting

string

<disable>

Disable the setting

string

diagnose nft settings reset

Reset to default settings

diagnose nft settings reset

diagnose nft settings show

Show current settings

diagnose nft settings show

diagnose nft show

Show rules loaded in kernel

diagnose nft show <table>

Parameter

Description

Type

Size

<table>

Filter by table name (optional)

string

diagnose nft update

Request an update - omit arguments to update all

diagnose nft update <hook>

Parameter

Description

Type

Size

<hook>

Hook mask (hex; optional)

string