Packet Capture from FortiSwitch 424 Switchport not Working

Forum|Forum|3 years ago
March 1, 2023
1 reply
1938 views

I'm attempting to obtain a packet capture directly from a switchport using the CLI . However, I'm not able to specify the interface (port1) when using the command: diag sniffer packet. Is there a command or another method that can be used to view traffic from a specific switchport interface?

The Switch firmware - FS1D24-v7.2.3-build0434.

Regards,

Andrade

FortiSwitch

gfleming

Staff

Standlone switch or managed by FortiGate?

Andrade_NarcisAuthor

New Member

It's managed by the Fortigate

gfleming

Staff

I believe the best thing you can do in this case is using SPAN port to a host running wireshark or even to an empty port on the FortiGate and use sniffer there....

https://docs.fortinet.com/document/fortiswitch/7.0.8/devices-managed-by-fortios/173278/configuring-fortiswitch-port-mirroring

Sign up

Login with SSO

Login to the community

Login with SSO