FortiOS 7.2 NEW Packet Capture

[@jerimahjohnson8698]

question?? Fortigate 101F running 7.4.4. start packet capture but its not showing up in real time??? what am I missing sir?

[@NicholasRichardson]

I need to correct you here, the "diagnostics" menu is NOT awesome. It took something which was awesome and made it rubbish. You used to be able to take multiple pcaps in tandem, which was super powerful to see traffic both entering and leaving the firewall, if you wanted, or if you just wanted to capture different filters at the same time. Now not only can you only take a single pcap, you must stay on the "diagnostics" page in order to do it. Merrily sucks. All this to build in a pcap reader, which if you cant actually use wireshark you have no business using anyway, stop making super users suffer for dumb minority. One of the worst "improvements" ever, with the exception of debug flow gui, which wouldve sufficed on its own. Rant over.

[@NicholasRichardson]

And further the pcaps now download with a generic "packet-capture" name, which if you've never had to download dozens in a session its kind of handy to have the interface name like they used to. Shake. My. Head. Its a crime.

[@danshtr]

Since upgrading to 7.2, hit count and logs are empty. I am on 60E. Have anyone else seen that too?

[@FortiTip]

Set local traffic enable on the CLI ?

[@RK-ly5qj]

You can call yourself "a brave man" nobody isnt that crazy to install initial version in production ;p

[@danshtr]

@@RK-ly5qj Its not production. Its my home firewall.

[@RK-ly5qj]

@@danshtr i was just joking, home is a best place for testing - 'till you wife is starting to scream "again" ;P

[@danshtr]

@@RK-ly5qj though you are correct about being crazy running this in production... Anyway, when wife get crazy, I switch to UI ER-X router