|
FortiProxy supports debug flow traces for troubleshooting traffic flow.
diagnose debug flow filter <filter and value>
clear Clear filter.
vd Index of virtual domain.
vd-name Name of virtual domain.
proto Protocol number.
addr IP address.
saddr Source IP address.
daddr Destination IP address.
port port
sport Source port.
dport Destination port.
negate Inverse filter.
diagnose debug flow trace start <number of packets>
diagnose debug enable
Example commands for debugging:
diagnose debug disable
diagnose debug flow trace stop
diagnose debug flow filter clear
diagnose debug reset
diagnose debug flow filter addr x.x.x.x
diagnose debug flow show function-name enable
diagnose debug console timestamp enable
diagnose debug flow trace start 999
diagnose debug enable
To stop the debugging:
diagnose debug disable
diagnose debug reset
Follow the command below to run the WAD debug flow for FortiProxy:
diagnose debug flow filter addr x.x.x.x
diagnose wad debug enable category <choose your category like policy,ssl or ALL>
diagnose debug en
To stop the debugging:
diagnose debug disable
diagnose debug reset
Example of the traffic flow in FortiProxy with wad debug:
ion-kvm156 # dia wad debug enable category policy
ion-kvm156 # dia de en
[I]2025-08-21 21:55:37.330847 [p:1483][s:641][r:2891] wad_http_conn_req_classify :4801 no security profile HTTPS/HTTP, tport=443
[V]2025-08-21 21:55:37.442475 [p:1483][s:641][r:2891] wad_http_req_check_policy :12946 start match policy vd=0(ses_ctx:x|Phx|M|Hh|C|A7|O) (10.5.210.28:55700@3->23.192.228.80:443@3) absUrl=1
[I]2025-08-21 21:55:37.442614 [p:1483][s:641][r:2891] wad_fast_match_is_enable :4087 fast matching is enabled
[V]2025-08-21 21:55:37.442626 [p:1483][s:641][r:2891] wad_fast_match_get_webproxy :3784 Get key webproxy index:1
[V]2025-08-21 21:55:37.442636 [p:1483][s:641][r:2891] wad_fast_match_get_dst_intf :3813 Get key dst intf:1
[V]2025-08-21 21:55:37.442641 [p:1483][s:641][r:2891] wad_fast_match_pol_array :3850 Try to maching pol:0, 0/1(pos/sz)
[I]2025-08-21 21:55:37.442645 [p:1483][s:641][r:2891] wad_fw_policy_async_match :6820 pol_ctx:xhcf|Ad|7?|=d
[I]2025-08-21 21:55:37.442651 [p:1483][s:641][r:2891] wad_http_req_policy_set :10486 match policy-id=1(pol_ctx:xhcf|Ad|7?|=d) vd=0(ses_ctx:x|Phx|Mde|Hh|C|A7|
|
