Diagnose packet sniffer vith VIP

[leon84]

Hi to all,

I use diagnose sniffer packet tool but I have problem when I try to capture traffic into VIP.

Example: I have public interface wan1 and internal interface internal1 on my fortigate. I configured a VIP on wan1: all traffic with destination TCP port 80 is forwarded to a private ip address on internal1. The VIP run correctly but when I try to snif packet with "diagnose sniffer packet wan1 "tcp and dst port 80" the tool capture nothing.

Where is the error? 

Thanks

[neonbit]

I just ran this on my VIP/wan interface and could see traffic.

What model of FortiGate do you have? I'm wondering if traffic may have been offloaded to an NP.

[leon84]

Fortigate 60c