The packet counter of the ISF (Integrated Switch Fabric), which refers to the Marvell chip, can be checked using the following method.
Check which Marvell Switch port the front panel port for counter verification is mapped to. In the following example, port1 is mapped to 0/29.
diagnose npu np7 port-list
Front Panel Port:
Name Max_speed(Mbps) Dflt_speed(Mbps) Sw_Trunk_Id Sw_Tcam_Id Group_from_vdom Switch_id SW_port_id SW_port_name
-------- --------------- --------------- --------------- ---------- --------------- --------- ---------- ------------
port1 1000 1000 -1 0 0 0 29 n/a
port2 1000 1000 -1 0 0 0 28 n/a
port3 1000 1000 -1 0 0 0 31 n/a
port4 1000 1000 -1 0 0 0 30 n/a
......
Connect to the Marvell CLI using the following command to retrieve the counters:
diagnose sys mvl cli
Connected to the server.
DX Mode
Entering LuaCLI took 221.711248 msec
LUA CLI based on LUA 5.1 from www.lua.org
LUA CLI uses Mini-XML engine from www.minixml.org
***************************************************
LUA CLI shell ready
***************************************************
Execute the following command to display the counters:
do show interfaces mac counters ethernet 0/29
Good Octets Received: 6293421
Bad Octets Received: 0
MAC Transmit Error: 0
BRDC Packets Received: 5330
MC Packets Received: 5685
Size 64: 5303
Size 65 to 127: 7862
Size 128 to 255: 767
Size 256 to 511: 136
Size 512 to 1023: 186
......
v7.6.3 and later:
diagnose sys mvl counters 0/29
Connected to the server.
DX Mode
Entering LuaCLI took 226.383988 msec
LUA CLI based on LUA 5.1 from www.lua.org
LUA CLI uses Mini-XML engine from www.minixml.org
***************************************************
LUA CLI shell ready
***************************************************
Console# do set output nopause
Console# show interfaces mac counters ethernet 0/29
Good Octets Received: 23113367
Bad Octets Received: 0
MAC Transmit Error: 0
BRDC Packets Received: 20060
MC Packets Received: 14542
Size 64: 19305
Size 65 to 127: 6692
Size 128 to 255: 1263
Size 256 to 511: 3240
Size 512 to 1023: 1230
Size 1024 to 1518: 0
Size 1519 to Max: 0
Good Octets Sent: 1559136
Excessive Collision: 0
MC Packets Sent: 85
BRDC Packets Sent: 2
FC Sent: 0
Good FC Received: 0
Drop Events: 0
Undersize Packets: 0
Fragments Packets: 0
Oversize Packets: 0
Jabber Packets: 0
MAC RX Error Packets Received: 0
Bad CRC: 0
Collisions: 0
Late Collision: 0
FC Received: 0
Good UC Packets Received: 5586
Good UC Packets Sent: 5129
Multiple Packets Sent: 0
Deferred Packets Sent: 0
Console# CLIexit
Connection closed by foreign host.
To check whether any packet drops are occurring in the ISF, use the following commands:
debug
show drop counters 0
Router:
Drop Counter: 0
RouterDropCntMode= "CPSS_DXCH_IP_DROP_CNT_COUNT_ALL_MODE_E"
Ingress:
Drop Counter: 0
Configuration: 0
IngressDropCntMode="CPSS_DXCH_CFG_INGRESS_DROP_COUNTER_MODE_ALL_E"
IngressDropCntPort=0
CPU Code Rate Limiter:
......
exit
Enter exit after retrieving the information.
To check ISF allocate information, run the following commands:
show tail-drop device 0
show tail-drop-allocated buffers all
v7.6.4 and later:
diagnose sys mvl tail-drop
diagnose sys mvl tail-drop-buff all
To see a traffic trace, run the following command:
show counters packet-trace device 0
Counter Description
---------------------- ---------------------------------------------------------
goodOctetsRcv Number of ethernet frames received that are not bad
ethernet frames or MAC Control pkts
badOctetsRcv Sum of lengths of all bad ethernet frames received
gtBrgInFrames Number of packets received
gtBrgVlanIngFilterDisc Number of packets discarded due to VLAN Ingress Filtering
gtBrgSecFilterDisc Number of packets discarded due to
Security Filtering measures
gtBrgLocalPropDisc Number of packets discarded due to reasons other than
VLAN ingress and Security filtering
dropCounter Ingress Drop Counter
outUcFrames Number of unicast packets transmitted
outMcFrames Number of multicast packets transmitted. This includes
registered multicasts, unregistered multicasts
and unknown unicast packets
outBcFrames Number of broadcast packets transmitted
brgEgrFilterDisc Number of IN packets that were Bridge Egress filtered
txqFilterDisc Number of IN packets that were filtered
due to TxQ congestion
outCtrlFrames Number of out control packets
(to cpu, from cpu and to analyzer)
egrFrwDropFrames Number of packets dropped due to egress
forwarding restrictions
goodOctetsSent Sum of lengths of all good ethernet
frames sent from this MAC
Counter Source port- 0/0 Destination port- 0/0
----------------------- --------------------- ---------------------
goodOctetsRcv 904022 0
badOctetsRcv 0 0
Ingress counters
gtBrgInFrames 32023 32023
gtBrgVlanIngFilterDisc 0 0
gtBrgSecFilterDisc 0 0
gtBrgLocalPropDisc 0 0
dropCounter 0 Only for source-port
Egress counters
outUcFrames 7956 7956
outMcFrames 12357 12357
outBcFrames 11710 11710
brgEgrFilterDisc 0 0
txqFilterDisc 0 0
outCtrlFrames 0 0
egrFrwDropFrames 0 0
goodOctetsSent 8058713 0
v7.6.4 and later:
diagnose sys mvl packet-trace
Connected to the server.
DX Mode
Entering LuaCLI took 220.360831 msec
LUA CLI based on LUA 5.1 from www.lua.org
LUA CLI uses Mini-XML engine from www.minixml.org
***************************************************
LUA CLI shell ready
***************************************************
Console# do set output nopause
Console# show counters packet-trace device 0
Counter Description
---------------------- ---------------------------------------------------------
goodOctetsRcv Number of ethernet frames received that are not bad
ethernet frames or MAC Control pkts
badOctetsRcv Sum of lengths of all bad ethernet frames received
gtBrgInFrames Number of packets received
gtBrgVlanIngFilterDisc Number of packets discarded due to VLAN Ingress Filtering
gtBrgSecFilterDisc Number of packets discarded due to
Security Filtering measures
gtBrgLocalPropDisc Number of packets discarded due to reasons other than
VLAN ingress and Security filtering
dropCounter Ingress Drop Counter
outUcFrames Number of unicast packets transmitted
outMcFrames Number of multicast packets transmitted. This includes
registered multicasts, unregistered multicasts
and unknown unicast packets
outBcFrames Number of broadcast packets transmitted
brgEgrFilterDisc Number of IN packets that were Bridge Egress filtered
txqFilterDisc Number of IN packets that were filtered
due to TxQ congestion
outCtrlFrames Number of out control packets
(to cpu, from cpu and to analyzer)
egrFrwDropFrames Number of packets dropped due to egress
forwarding restrictions
goodOctetsSent Sum of lengths of all good ethernet
frames sent from this MAC
Counter Source port- 0/0 Destination port- 0/0
----------------------- --------------------- ---------------------
goodOctetsRcv 390976 0
badOctetsRcv 0 0
Ingress counters
gtBrgInFrames 12335 12335
gtBrgVlanIngFilterDisc 0 0
gtBrgSecFilterDisc 0 0
gtBrgLocalPropDisc 0 0
dropCounter 0 Only for source-port
Egress counters
outUcFrames 1556 1556
outMcFrames 3918 3918
outBcFrames 6861 6861
brgEgrFilterDisc 0 0
txqFilterDisc 0 0
outCtrlFrames 0 0
egrFrwDropFrames 0 0
goodOctetsSent 4308901 0
Console# CLIexit
Connection closed by foreign host.
6) To check traffic trace from a specific interface, run the following commands. The example below is port1. The SW_port_id of port1 is 29:
diagnose npu np7 port-list
Front Panel Port:
Name Max_speed(Mbps) Dflt_speed(Mbps) Sw_Trunk_Id Sw_Tcam_Id Group_from_vdom Switch_id SW_port_id SW_port_name
-------- --------------- --------------- --------------- ---------- --------------- --------- ---------- ------------
port1 1000 1000 -1 0 0 0 29 n/a
......
configure
interface ethernet 0/29
counters packet-trace source-port
counters packet-trace destination-port
end
show counters packet-trace device 0
Counter Description
---------------------- ---------------------------------------------------------
goodOctetsRcv Number of ethernet frames received that are not bad
ethernet frames or MAC Control pkts
badOctetsRcv Sum of lengths of all bad ethernet frames received
gtBrgInFrames Number of packets received
gtBrgVlanIngFilterDisc Number of packets discarded due to VLAN Ingress Filtering
gtBrgSecFilterDisc Number of packets discarded due to
Security Filtering measures
gtBrgLocalPropDisc Number of packets discarded due to reasons other than
VLAN ingress and Security filtering
dropCounter Ingress Drop Counter
outUcFrames Number of unicast packets transmitted
outMcFrames Number of multicast packets transmitted. This includes
registered multicasts, unregistered multicasts
and unknown unicast packets
outBcFrames Number of broadcast packets transmitted
brgEgrFilterDisc Number of IN packets that were Bridge Egress filtered
txqFilterDisc Number of IN packets that were filtered
due to TxQ congestion
outCtrlFrames Number of out control packets
(to cpu, from cpu and to analyzer)
egrFrwDropFrames Number of packets dropped due to egress
forwarding restrictions
goodOctetsSent Sum of lengths of all good ethernet
frames sent from this MAC
Counter Source port- 0/0 Destination port- 0/0
----------------------- --------------------- ---------------------
goodOctetsRcv 43635 0
badOctetsRcv 0 0
Ingress counters
gtBrgInFrames 3830 3830
gtBrgVlanIngFilterDisc 0 0
gtBrgSecFilterDisc 0 0
gtBrgLocalPropDisc 0 0
dropCounter 0 Only for source-port
Egress counters
outUcFrames 184 184
outMcFrames 1926 1926
outBcFrames 1720 1720
brgEgrFilterDisc 0 0
txqFilterDisc 0 0
outCtrlFrames 0 0
egrFrwDropFrames 0 0
goodOctetsSent 447502 0
 5) After collecting all logs, disconnect from the Marvell CLI with the following command:  CLIexit
Note: Direct Marvell switch CLI access has been removed as of FortiOS v7.6.1.
Related documents: FortiGate 400F and 401F fast path architecture FortiGate 600F and 601F fast path architecture diagnose sys | 
