Interface packet capture

You can perform packet capture on a managed FortiGate's interface through the device database.

To perform a packet capture on managed FortiGate interfaces:

1. In Device Manager, select a FortiGate and go to Network> Interfaces.
2. Select an interface, click More > Packet Capture.
   
   
3. You can configure the Max Number of Packets and/or Filters, and click OK to start the packet capture.
   If Max Number of Packets is not specified, the packet capture will stop after 50000 packets to preserve memory.
   
   
4. Select Graph, Headers, or Packet Data to view details of the packet.
5. Optionally, click Save as PCAP to save the file in the .pcap format.