Skip to main content
AlexFerenX
Visitor III
Sep 10, 2024 6:17 AM UTC
Question

New "diagnose debug traffic..."

Hi!

FortiGate / FortiOS 7.0.0 FortiOS Release Notes introduces:

677784

Add commands to debug traffic statistics for traffic monitor interfaces (interface), interface traffic in real-time data (peek), and to dump interface traffic history data (history):

# diagnose debug traffic {interface | peek | history}

without further elucidation.

 

Anyone (esp. Fortinet) can provide clues on use-case and usage?

 

Thanks, Feren.

8 replies

jiyong
Staff
Staff
Sep 10, 2024 6:29 AM UTC

Hi @AlexFerenX 

 

When checking the above command, it looks like this:

interface : List traffic monitor interface.
peek : Display interface traffic real-time data.
history : Dump interface traffic history data.

 

To use the above debug, the settings below must be enabled.

config system interface

edit mgmt

set monitor-bandwidth enable

 

Thanks.

AlexFerenX
Visitor III
Sep 10, 2024 6:50 AM UTC

Hi @jiyong, can you show actual printouts (ie. with useful data)... ? Thanks!

jiyong
Staff
Staff
Sep 10, 2024 7:02 AM UTC

I think it is expressed in bytes, but I think I need to look for more information.

 

# diagnose debug traffic interface
Interfaces:
port1

1 monitored interfaces.

 

# diagnose debug traffic peek port1 1

 

# diagnose debug traffic history port1 1
1725951565 - 4329751745
( 4717048, 1235128)
---------------------------------------------
000 - ( 0, 0)
001 - ( 13528, 10576)
002 - ( 7792, 6480)
003 - ( 5928, 6344)

kmohan
Staff
Staff
Sep 11, 2024 10:55 AM UTC

Hi Alex,

It's a bug on the release notes 7.0.0

Summary:
Incorrect bandwidth utilization on interface traffic widget

Example:

ISP is connected to any interface( Port1) of the device. Maximum traffic provided by ISP 50Mbps.
-However Bandwidth utilization graph for 'inbound' traffic on the interface traffic widget shows 82Mbps

- Due to incorrect interface utilization data.

To check via CLI follow the below command.

 

To help with debugging interface's traffic statistic, new diagnose commands are added "diagnose debug traffic interface/peek/history"

CLI Changes:
Add:diagnose debug traffic xxx

Details:
# diagnose debug traffic ?
interface List traffic monitor interface.
peek Display interface traffic real-time data.
history Dump interface traffic history data.

Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.
Security Operations Summit: Modernize SecOps. Operate AI-Native.AMER: November 4 | 9:00 AM PST. India and SAARC: November 5 | 10:00 AM IST. EMEA: November 5 | 10:30 AM CET. APAC: November 5 | 11:00 AM SGT