常用命令

  1. IPv6抓包。

    FGT # diagnose sniffer packet any 'host 2001:aa:1::10' 4    //基于ipv6地址
    interfaces=[any]
    filters=[host 2001:aa:1::10]
    1.389573 internal in 2001:bb:1::10 -> 2001:aa:1::10: icmp6: echo request seq 415
    1.389692 wan1 out 2001:bb:1::10 -> 2001:aa:1::10: icmp6: echo request seq 415
    1.389912 wan1 in 2001:aa:1::10 -> 2001:bb:1::10: icmp6: echo reply seq 415
    1.389983 internal out 2001:aa:1::10 -> 2001:bb:1::10: icmp6: echo reply seq 415
    2.391299 internal in 2001:bb:1::10 -> 2001:aa:1::10: icmp6: echo request seq 416
    2.391426 wan1 out 2001:bb:1::10 -> 2001:aa:1::10: icmp6: echo request seq 416
    2.391671 wan1 in 2001:aa:1::10 -> 2001:bb:1::10: icmp6: echo reply seq 416
    2.391735 internal out 2001:aa:1::10 -> 2001:bb:1::10: icmp6: echo reply seq 416
    8 packets received by filter
    0 packets dropped by kernel
    
    FGT # diagnose sniffer packet any icmp6 4 2    //基于icmp6
    interfaces=[any]
    filters=[icmp6]
    1.410860 internal in 2001:bb:1::10 -> 2001:aa:1::10: icmp6: echo request seq 431
    1.410986 wan1 out 2001:bb:1::10 -> 2001:aa:1::10: icmp6: echo request seq 431
    
  2. IPv6会话。

    FGT # diagnose sys session6 list
    session6 info: proto=17 proto_state=01 duration=0 expire=179 timeout=0 flags=00000000 sockport=0 sockflag=0 use=3
    origin-shaper=shared-1M-pipe prio=2  guarantee 0Bps  max 131072Bps  traffic 787Bps)
    reply-shaper=shared-1M-pipe prio=2  guarantee 0Bps  max 131072Bps traffic 787Bps)
    per_ip_shaper=
    ha_id=0
    policy_dir=0 tunnel=/
    state=may_dirty os rs
    statistic(bytes/packets/allow_err): org=83/1/0 reply=276/1/0 tuples=2
    orgin->sink: org pre->post, reply pre->post dev=3->5/5->3
    hook=pre dir=org act=noop 2001:bb:1::10:57194 ->2001:aa:1::10:53(:::0)
    hook=post dir=reply act=noop 2001:aa:1::10:53 ->2001:bb:1::10:57194(:::0)
    misc=0 policy_id=1 auth_info=0 chk_client_info=0 vd=0 serial=000003f1
    npu_state=00000000
    
    FGT # diagnose sys session6 full-stat
    session table:           table_size=131072 max_depth=1 used=188
    misc info:       session_count=94 setup_rate=20 exp_count=0 clash=0
           memory_tension_drop=0 ephemeral=0/0 removeable=0
    delete=0, flush=0, dev_down=0/0
    TCP sessions:
            19 in ESTABLISHED state
    
  3. debug flow 命令。

    diagnose debug enable
    diagnose debug flow filter6 proto 1
    diagnose debug flow show con enable
    diagnose debug flow trace start6 10
    

Copyright © 2024 Fortinet Inc. All rights reserved. Powered by Fortinet TAC Team.
📲扫描下方二维码分享此页面👇
该页面修订于: 2023-01-06 15:58:02

results matching ""

    No results matching ""