The FortiGate has a built-in packet sniffer, diagnose sniffer packet, that understands the same filter syntax as tcpdump. This cheat sheet collects the filters we use most, from simple host and port matches to TCP flags and protocols such as IPsec, RADIUS and CAPWAP.