What is wrong with this syntax?
diagnose sniffer packet any 'src 10.x.y.z dst 172.a.b.c'
Solved...:
diagnose sniffer packet any 'src 10.x.y.z dst and 172.a.b.c'
your syntax is wrong for tcpdump filters. It's supposed to be:
diag sniffer packet any 'src 10.x.y.z and dst 172.a.b.c' 4 0 l (header/forever/local time)
Or you can use different options at the end.
Toshi
Hello @Toshi_Esumi
Even this syntax also works :
diag sniffer packet any 'src 10.1.1.1 and dst 172.1.1.1'
Although it is better to use with the header and verbose level and timestamps.
User | Count |
---|---|
2061 | |
1175 | |
770 | |
448 | |
343 |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2025 Fortinet, Inc. All Rights Reserved.