For When You Can't Have The Real Thing
[ start | index | login ]
start > FortiOS > 5 > Packet Dumps

Packet Dumps

Created by dave. Last edited by dave, 42 days ago. Viewed 1,365 times. #3
[diff] [history] [edit] [rdf]

Show information of packets seen on an interface:

# diag sniffer packet internal none 4 3
internal in -> psh 2859918764 ack 1949135261
internal in -> psh 2859918816 ack 1949135261
internal out -> ack 2859918884
In this example:
  • none is the filter
  • 4 means show verbose level 4
  • 3 means show 3 packets then stop
Verbose levels: usually you want level 3 or level 4. Level three shows you a hex dump of the packet, good for looking for mac addresses or whatever. If you just want to see the IP/TCP information, level 4 is sufficient.

More details >>here

# diag sniffer packet internal1 "host" 4 150

# diag sniffer packet internal1 "src host" 4 150

# diag sniffer packet internal1 "src host dst host" 4 150

no comments | post comment
This is a collection of techical information, much of it learned the hard way. Consider it a lab book or a /info directory. I doubt much of it will be of use to anyone else.

Useful: | Copyright 2000-2002 Matthias L. Jugel and Stephan J. Schmidt