I have a fortigate 40F with an lan1 to lan4 configured as an hardware switch (lan).
I would like to capture switched traffic between hosts, even if it's not in the same IP subnet than the lan configuration.
I have tried
diagnose sniffer packet lan
but it only return broadcast STP trafic
interfaces=[lan] filters=[none] 1.4294199540 BPDU 'lan2' stp 802.1w, rapid stp, flags [proposal, agreement], bridge-id 8000.... 1.4294199560 BPDU 'lan1' stp 802.1w, rapid stp, flags
When I specify a physical interface, it return nothing since there is no ip addres assigned:
diagnose sniffer packet lan1 interfaces=[lan1] filters=[none] pcap_lookupnet: lan1: no IPv4 address assigned
I've tried to enable ips-sniffer-mode but didn't changed anything
config system interface edit lan set ips-sniffer-mode enable next end