Skip to main content
anru
anru
New Member
February 23, 2016
Question

Report of 'one-arm sniffer interface' data

  • February 23, 2016
  • 1 reply
  • 4700 views

Hi all,

on my FG I've an interface configured as one-arm sniffer interface. Traffic captured can be seen in the Traffic log > Sniffer Traffic and in FortiView sections, but when I try to generate a report there's no data.

Is there a way to generate local report (without using FortiAnalyzer) with sniffer traffic data?

 

Thanks.

1 reply

michaelbazy_FTNT
Staff
michaelbazy_FTNT
Staff
November 9, 2016

Hi Anru,

 

I have the same behavior here. Still looking, however so far I'd say that it's by design : Logs generated using 1-arm sniffer mode are not injected in the SQL DB.

 

Were you able to workaround your issue without a FAZ unit?

 

Thanks and regards,

 

Michael

Terms & ConditionsAccessibility statement