Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
slouw
Contributor

diagnose sniffer packet CLI with source and destination filter syntax

What is wrong with this syntax?

diagnose sniffer packet any 'src 10.x.y.z dst 172.a.b.c'

 

 

2024-02-26 12h05m43 src and dst error.png

3 REPLIES 3
slouw
Contributor

Solved...:

diagnose sniffer packet any 'src 10.x.y.z dst and 172.a.b.c'

Toshi_Esumi
Esteemed Contributor III

your syntax is wrong for tcpdump filters. It's supposed to be:

diag sniffer packet any 'src 10.x.y.z and dst 172.a.b.c' 4 0 l (header/forever/local time)

Or you can use different options at the end.

Toshi

Rajneesh
Staff
Staff

Hello @Toshi_Esumi 

Even this syntax also works : 

diag sniffer packet any 'src 10.1.1.1 and dst 172.1.1.1'

Although it is better to use with the header and verbose level and timestamps.

Labels
Top Kudoed Authors