Table of Contents
Advertisement
Stopping the packet
capture
Once the FortiGate reaches the maximum
number of packets to save (in this case 100),
the capturing progress stops and you can
download the saved pcap file.
You can also stop the capturing at any time
before reaching the maximum number of
packets.
Results
Open the pcap file with a pcap file viewer,
such as tcpdump or Wireshark.
Adjust the settings in the filter depending on
the kind of traffic you wish to capture.
Go to Log & Report > Event Log >
System to verify that the packet capture file
downloaded successfully.
48
The FortiGate Cookbook 5.0.
Advertisement
Table of Contents
