Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
Umesh
Contributor

Debug command - unable to understand meanings

Hi All,

I want to understand the meaning of following commands, Can anyone make me understand.

What I have understood below commands -

 

diagnose debug enable (enable debug)
diagnose debug flow trace start (In order to start debug packet)
diagnose debug flow trace stop (To stop debug output)
diagnose debug flow filter addr 203.160.224.97 (I think 203.160.224.97 is the source address from where traffic is initiating)
diagnose debug flow show function-name enable ( Not able to understand this command)
diagnose debug flow trace start 100 (Debug output packet would be 100 as per my thinking)

diagnose debug flow trace stop  (In order to stop debug output)

 

Thank you

1 REPLY 1
bpozdena_FTNT

Hi Umesh,

 

your understanding is correct. Just note that `flow filter addr 203.160.224.97` will show flow debug for packets with source or destination IP 203.160.224.97. You can use `flow filter saddr` or `flow filter daddr` to specify the direction. 

 

The bellow two slides might help understand some more details about the outputs. 

 

bpozdena_FTNT_1-1667310864411.png

 

bpozdena_FTNT_0-1667310777047.png

 

HTH,
Boris
Announcements

Select Forum Responses to become Knowledge Articles!

Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.

Labels
Top Kudoed Authors