Technical Tip: Capture multiple packets at the same time

[Dongkwan]

Description	This article describes that it is possible to capture and compare multiple packets at the same time in the GUI for network troubleshooting purposes.
Scope	FortiOS.
Solution	In v7.4.x and above, it is possible to take multiple packet captures at the same time in the GUI. From GUI, go to Network -> Diagnostics -> Packet Capture. The capture profiles have been created when selecting '+New packet capture'. Each capture profile runs simultaneously in the background and can be monitored: In versions below 7.4.x, it is required to use the CLI to take multiple packet captures at the same time. Multiple CLI windows can be opened and run a different sniffer command at the same time. As there is limited scrollback in the built-in CLI, consider using SSH and a tool like PuTTy to log the output to a file. It would then be possible to download the output of each CLI session, and then convert that to a PCAP. The steps for that can be seen here: Technical Tip: How to import 'diagnose sniffer packet' data to WireShark.