Exploring the diag stats fortigate

Fortinet has always been a leader with regards to application identification statistics. In this post we will look at  obtain  statistical information by using  the diag stat  command from the cli.

The command has a limited set of options;


DAFWFGT800 # diag stat
app-bandwidth     applications by bandwidth of last minute
app-stat-clear    clear application statistics
app-usage-ip      per ip usage of application
per-ip-bw         top bandwidth by IP address
 

Typically one will execute the app-bandwidth to get a general overview of traffic statistics.

e.g

Note: I  highlighted a few fields such as ;

application id 
sessions counts
bps 
application name

With this diag cmd, you can specify the  app-id if known for statis on that application.

With the count option, you can now get statistics by address.

By using the per-ip option we can list of the top talkers;

This command can be creative and helpful with traffic status and counts.



Ken Felix
NSE ( network security expert) and Route/Switching Engineer
kfelix  -----a----t---- socpuppets ---dot---com

     ^      ^
=(  @  @ )=
         o 
        /  \