Fortinet black logo

Administration Guide

Configuring FortiSwitch packet captures

Configuring FortiSwitch packet captures

You can run or schedule a FortiSwitch packet capture on FortiManager.

To configure a FortiSwitch packet capture:
  1. Go to FortiSwitch Manager > Managed FortiSwitches.

  2. From the devices menu, select a FortiGate or choose Managed FortiGate (#).
    The FortiSwitch devices for the selected FortiGate(s) are displayed in the table.

  3. Select a FortiSwitch from the table, and click Packet Capture from the toolbar.
    The Packet Capture window is displayed.

  4. Click Create New to create a new packet capture filter.

  5. (Optional) Enable the Schedule Run setting to schedule the packet capture to run between the specified start and end time.

  6. Configure the remaining filter settings, and click OK to save the filter.

  7. You can view, edit, delete and run the configured filter in the Packet Capture window.

    • Select the packet capture filter, and click Start Capture. After the packet capture is run, you can download the results by clicking Save as PCAP.

    • If a schedule is configured, the schedule is displayed in the Scheduled Packet Capture field. You can download the results by clicking the capture in the Captures field, or see the results in FortiManager by clicking View.

Configuring FortiSwitch packet captures

You can run or schedule a FortiSwitch packet capture on FortiManager.

To configure a FortiSwitch packet capture:
  1. Go to FortiSwitch Manager > Managed FortiSwitches.

  2. From the devices menu, select a FortiGate or choose Managed FortiGate (#).
    The FortiSwitch devices for the selected FortiGate(s) are displayed in the table.

  3. Select a FortiSwitch from the table, and click Packet Capture from the toolbar.
    The Packet Capture window is displayed.

  4. Click Create New to create a new packet capture filter.

  5. (Optional) Enable the Schedule Run setting to schedule the packet capture to run between the specified start and end time.

  6. Configure the remaining filter settings, and click OK to save the filter.

  7. You can view, edit, delete and run the configured filter in the Packet Capture window.

    • Select the packet capture filter, and click Start Capture. After the packet capture is run, you can download the results by clicking Save as PCAP.

    • If a schedule is configured, the schedule is displayed in the Scheduled Packet Capture field. You can download the results by clicking the capture in the Captures field, or see the results in FortiManager by clicking View.