IT Toolbox
IT Toolbox

Analyze the path of a stream on FortiGate

View my favorites
FortiGate High risk

Analyze the path of a stream on FortiGate

temporarily activates the debug flow to identify the rule, route or reason for a traffic block.

Command / script 
diagnose debug reset
diagnose debug flow filter clear
diagnose debug flow filter addr 192.168.1.10
diagnose debug flow filter port 443
diagnose debug flow show console enable
diagnose debug flow trace start 50
diagnose debug enable

# Generate le trafic à tester, puis arrêter immédiatement :
diagnose debug disable
diagnose debug flow trace stop
diagnose debug reset

When should you use it?

Reserve this for technicians when a policy or route appears to block traffic without an obvious explanation.

What the script does

  • Filters reduce the amount of trace output.
  • trace start 50 limits the analysis to 50 flows.
  • The final three commands stop and reset debugging.

Precautions

  • Never leave debugging enabled in production.
  • Add precise filters before diagnose debug enable.
  • The output can be large and make the console difficult to read.

Rollback

Always run diagnose debug disable, diagnose debug flow trace stop, and diagnose debug reset.

← Back to the script library
♡ 0