Fortinet black logo

Administration Guide

Packet Capture

Packet Capture

You can create a filter on an interface to capture a specified number of packets to examine. Go to Network > Packet Capture to see existing packet capture filters.

Hover over the leftmost edge of the column heading to display the Configure Table icon, which you can use to select the columns to display or to reset all the columns to their default settings. You can also drag column headings to change their order.

The following options are available:

Create New

Creates a new packet capture filter. See Create or edit a packet capture filter.

Edit

Modifies settings within a packet capture filter.

Clone

Copies an existing packet capture filter.

Delete

Removes a packet capture filter from the list.

To remove multiple filters, select multiple rows in the list by holding down the Ctrl or Shift keys and then select Delete.

Search

Enter a search term to search the filter list.

Interfaces

The interface or port number that the filter will examine.

Host Filter

The hosts being examined.

Port Filter

The ports being examined.

VLAN Filter

The VLANs being examined.

Protocol Filter

The protocols being examined.

Packets

The number of packets captured.

Max Packet Count

The maximum number of packets to collect.

Status

Whether the packet capture is running.

To run the capture, select the play button in the progress column in the packet capture list. If the filter is not active, Not Running is displayed in the column cell. The progress bar indicates the status of the capture. You can stop and restart it at any time. When the capture is complete, select the Download icon to save the packet capture file to your hard disk for further analysis.

Capture IPv6

Whether the capture IPv6 packets has been enabled.

Capture Non-IP

Whether the capture of non-IP packets has been enabled.

Packet Capture

You can create a filter on an interface to capture a specified number of packets to examine. Go to Network > Packet Capture to see existing packet capture filters.

Hover over the leftmost edge of the column heading to display the Configure Table icon, which you can use to select the columns to display or to reset all the columns to their default settings. You can also drag column headings to change their order.

The following options are available:

Create New

Creates a new packet capture filter. See Create or edit a packet capture filter.

Edit

Modifies settings within a packet capture filter.

Clone

Copies an existing packet capture filter.

Delete

Removes a packet capture filter from the list.

To remove multiple filters, select multiple rows in the list by holding down the Ctrl or Shift keys and then select Delete.

Search

Enter a search term to search the filter list.

Interfaces

The interface or port number that the filter will examine.

Host Filter

The hosts being examined.

Port Filter

The ports being examined.

VLAN Filter

The VLANs being examined.

Protocol Filter

The protocols being examined.

Packets

The number of packets captured.

Max Packet Count

The maximum number of packets to collect.

Status

Whether the packet capture is running.

To run the capture, select the play button in the progress column in the packet capture list. If the filter is not active, Not Running is displayed in the column cell. The progress bar indicates the status of the capture. You can stop and restart it at any time. When the capture is complete, select the Download icon to save the packet capture file to your hard disk for further analysis.

Capture IPv6

Whether the capture IPv6 packets has been enabled.

Capture Non-IP

Whether the capture of non-IP packets has been enabled.