FortiBleed FortigateSniffer: diagnose sniffer packet on FortiGate management

Ibrahim Saud@tektrix

•updated Jul 3, 2026•1•0•6

Detects the use of the 'diagnose sniffer packet' command on a FortiGate network device, which is indicative of an administrator or attacker performing network traffic capture and analysis directly from the device's management interface.