Technical Tip: How to sniff packet by MAC Address on FortiGate via CLI commands

[cskuan]

Description
This article describes how to sniff packet by MAC Address on FortiGate via CLI commands.

Solution
Below is the command to sniff packet by MAC Address on FortiGate via CLI commands:

To sniff the MAC Address when it is Source MAC = 00:09:0f:89:10:ea     

# diagnose sniffer packet <interface> "(ether[6:4]=0x00090f89) and (ether[10:2]=0x10ea)"

To sniff the MAC Address when it is Destination MAC = 00:09:0f:89:10:ea     

# diagnose sniffer packet <interface> "(ether[0:4]=0x00090f89) and (ether[4:2]=0x10ea)"