常用命令

1. IPv6 抓包。

   FGT # diagnose sniffer packet any 'host 2001:aa:1::10' 4    //基于ipv6地址
   interfaces=[any]
   filters=[host 2001:aa:1::10]
   1.389573 internal in 2001:bb:1::10 -> 2001:aa:1::10: icmp6: echo request seq 415
   1.389692 wan1 out 2001:bb:1::10 -> 2001:aa:1::10: icmp6: echo request seq 415
   1.389912 wan1 in 2001:aa:1::10 -> 2001:bb:1::10: icmp6: echo reply seq 415
   1.389983 internal out 2001:aa:1::10 -> 2001:bb:1::10: icmp6: echo reply seq 415
   2.391299 internal in 2001:bb:1::10 -> 2001:aa:1::10: icmp6: echo request seq 416
   2.391426 wan1 out 2001:bb:1::10 -> 2001:aa:1::10: icmp6: echo request seq 416
   2.391671 wan1 in 2001:aa:1::10 -> 2001:bb:1::10: icmp6: echo reply seq 416
   2.391735 internal out 2001:aa:1::10 -> 2001:bb:1::10: icmp6: echo reply seq 416
   8 packets received by filter
   0 packets dropped by kernel
   
   FGT # diagnose sniffer packet any icmp6 4 2    //基于icmp6
   interfaces=[any]
   filters=[icmp6]
   1.410860 internal in 2001:bb:1::10 -> 2001:aa:1::10: icmp6: echo request seq 431
   1.410986 wan1 out 2001:bb:1::10 -> 2001:aa:1::10: icmp6: echo request seq 431

2. IPv6 会话。

   FGT # diagnose sys session6 list
   session6 info: proto=17 proto_state=01 duration=0 expire=179 timeout=0 flags=00000000 sockport=0 sockflag=0 use=3
   origin-shaper=shared-1M-pipe prio=2  guarantee 0Bps  max 131072Bps  traffic 787Bps)
   reply-shaper=shared-1M-pipe prio=2  guarantee 0Bps  max 131072Bps traffic 787Bps)
   per_ip_shaper=
   ha_id=0
   policy_dir=0 tunnel=/
   state=may_dirty os rs
   statistic(bytes/packets/allow_err): org=83/1/0 reply=276/1/0 tuples=2
   orgin->sink: org pre->post, reply pre->post dev=3->5/5->3
   hook=pre dir=org act=noop 2001:bb:1::10:57194 ->2001:aa:1::10:53(:::0)
   hook=post dir=reply act=noop 2001:aa:1::10:53 ->2001:bb:1::10:57194(:::0)
   misc=0 policy_id=1 auth_info=0 chk_client_info=0 vd=0 serial=000003f1
   npu_state=00000000
   
   FGT # diagnose sys session6 full-stat
   session table:           table_size=131072 max_depth=1 used=188
   misc info:       session_count=94 setup_rate=20 exp_count=0 clash=0
          memory_tension_drop=0 ephemeral=0/0 removeable=0
   delete=0, flush=0, dev_down=0/0
   TCP sessions:
           19 in ESTABLISHED state

3. debug flow 命令。

   diagnose debug enable
   diagnose debug flow filter6 proto 1
   diagnose debug flow show con enable
   diagnose debug flow trace start6 10