Fortinet black logo

Administration Guide

Create or edit a packet capture filter

Create or edit a packet capture filter

Go to Network > Packet Capture to create or edit a packet capture filter.

To create a packet capture filter:
  1. Select Create New.

  2. Configure the following settings and click OK:

    Interface Select an interface.
    Maximum Captured Packets Enter how many packets to collect.
    Filters Enable Filters, you can create filters for host names, ports, VLAN identifiers, and protocols. Use commas to separate items. Use a hyphen to specify a range.
    Include Non-IP Packets Select this option if you want to include packets from non-IP protocols.
    API Preview The API Preview allows you to view all REST API requests being used by the page. You can make changes on the page that are reflected in the API request preview. This feature is not available if the user is logged in as an administrator that has read-only GUI permissions.
To use the API Preview:
  1. Click API Preview. The API Preview pane opens, and the values for the fields are visible (data). If a new object is being created, the POST request is shown.
  2. Enable Show modified changes only to show the modified changes instead of the full configuration in the preview.
  3. Click Copy to Clipboard to copy the JSON code shown on the preview screen to the clipboard.
  4. Click Close to leave the preview.
To edit a packet capture filter:
  1. Select a packet capture filter.
  2. Select Edit.
  3. Make your changes.
  4. Click OK to save your changes.

Create or edit a packet capture filter

Go to Network > Packet Capture to create or edit a packet capture filter.

To create a packet capture filter:
  1. Select Create New.

  2. Configure the following settings and click OK:

    Interface Select an interface.
    Maximum Captured Packets Enter how many packets to collect.
    Filters Enable Filters, you can create filters for host names, ports, VLAN identifiers, and protocols. Use commas to separate items. Use a hyphen to specify a range.
    Include Non-IP Packets Select this option if you want to include packets from non-IP protocols.
    API Preview The API Preview allows you to view all REST API requests being used by the page. You can make changes on the page that are reflected in the API request preview. This feature is not available if the user is logged in as an administrator that has read-only GUI permissions.
To use the API Preview:
  1. Click API Preview. The API Preview pane opens, and the values for the fields are visible (data). If a new object is being created, the POST request is shown.
  2. Enable Show modified changes only to show the modified changes instead of the full configuration in the preview.
  3. Click Copy to Clipboard to copy the JSON code shown on the preview screen to the clipboard.
  4. Click Close to leave the preview.
To edit a packet capture filter:
  1. Select a packet capture filter.
  2. Select Edit.
  3. Make your changes.
  4. Click OK to save your changes.