mirrors/cheat-sheets
1
0
Fork 0
mirror of https://github.com/yuriskinfo/cheat-sheets.git synced 2025-12-21 13:23:11 +01:00
Code Issues Packages Projects Releases Wiki Activity

Added remark about disabling offloading for the Fortigate sniffer

Browse Source
This commit is contained in:
yuriskinfo
2023-06-06 10:25:16 +03:00
parent ff7a11c5d5
commit a84497e7d1
1 changed files with 3 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
cheat-sheets/Fortigate-debug-diagnose-complete-cheat-sheet.adoc
View File

@@ -123,6 +123,9 @@ until the SSH/console timeout or until stopped with `CTRL + C`.
|For IPv6 traffic, the command is the same, but use the relevant `filter` clauses instead, |For IPv6 traffic, the command is the same, but use the relevant `filter` clauses instead,
e.g. `host 2001:db8::1` or `net 2001:db8::/64` or `icmp6`. e.g. `host 2001:db8::1` or `net 2001:db8::/64` or `icmp6`.
|*set auto-asic-offload disable*
|You may need to temporarily disable NPU hardware acceleration offloading, to see accelerated packets. You do so inside a specific firewall policy. This will cause all packets passing on this policy rule to be processed by CPU and thus make packets visible to the sniffer. This may increase the CPU load. E.g. `config firewall policy`, `edit 1`, `set auto-asic-offload disable`. Do not forget to turn it on again: `set auto-asic-offload enable`.
|=== |===