Zero bytes in traffic logs

[yeowkm99]

Under what scenario does 0 bytes happens?

policy is allowed for users to access internet but user reported blank screen when loading some URL.

upon checking traffic logs, it shows 0 bytes

[alif]

Hi @yeowkm99,

The result column shows bytes sent/received. If you double click on any log entry, it will pop up a window on the right hand side with detailed information.

Please run debugs/sniffer to identify the problem.

[yeowkm99]

what are the sniffer commands to run ?

[alif]

diag sniffer packet any "host <IP>" 4 0 l

Link: https://community.fortinet.com/t5/FortiGate/Technical-Tip-Packet-capture-sniffer/ta-p/198313

[gavinr]

Having same issue. Any solutions for this?

[rtichkule]

The above image shows that fortigate has sent some data however didnt received any. You can run the below sniffer command and check whether we are receiving any packet or not.

diag sniffer packet any "host <destination IP>" 4 0 l

[tthrilok]

Hi yeowkm99,

I understand your internal users are not able to access internet and also you are seeing the 0B received in the logs.

>> Could you please check if you have enabled NAT in the policies? If not, can you try by enabling the nat in the policy and test.

>> Are you having any upstream device which does NAT for your traffic?

Thank you!