Sniffer

[TopJimmy]

Anybody know how to sniff with the FortiGate for a whole subnet? I want to see all traffic to a specific external subnet. example: diagnose sniffer packet external ' dst 192.168.12.0/24' 6 spits out an error: pcap_compile: Mask syntax for networks only

[emnoc]

try dst net instead. Any standard tcpdump expresion should work e.g FWF50B3G08501299 # diag sniffer packet any " dst net 216.82.78" interfaces=[any] filters=[dst net 216.82.78]

[TopJimmy]

I should have known that. thanks!