Hot!HA ether type sniffer

Author
live89
Silver Member
  • Total Posts : 98
  • Scores: 10
  • Reward points: 0
  • Joined: 2016/05/11 07:20:42
  • Status: offline
2020/06/23 00:38:24 (permalink)
0

HA ether type sniffer

Hi
 
Has anyone came across this kind of sniffer messages when trying to sniffer 0x8890 HA heartbeat packets for a NAT/route mode cluster:
 
FW1 # diagnose sniffer packet any 'ether proto 0x8890' 4
interfaces=[any]
filters=[ether proto 0x8890]
0.644099 port32 in Ether type 0x8890 printer hasn't been added to sniffer.
0.670909 port32 out Ether type 0x8890 printer hasn't been added to sniffer.
0.844114 port32 in Ether type 0x8890 printer hasn't been added to sniffer.
0.870938 port32 out Ether type 0x8890 printer hasn't been added to sniffer.
1.044083 port32 in Ether type 0x8890 printer hasn't been added to sniffer.
1.070872 port32 out Ether type 0x8890 printer hasn't been added to sniffer.
1.244100 port32 in Ether type 0x8890 printer hasn't been added to sniffer.
1.270901 port32 out Ether type 0x8890 printer hasn't been added to sniffer.
1.444103 port32 in Ether type 0x8890 printer hasn't been added to sniffer.
1.470914 port32 out Ether type 0x8890 printer hasn't been added to sniffer.

 
We're running FGT1500D version 5.6.11
HA port32
Active/Passive cluster functioning normal

Thanks
#1

1 Reply Related Threads

    FortiMike
    New Member
    • Total Posts : 1
    • Scores: 0
    • Reward points: 0
    • Joined: 2021/05/14 19:23:41
    • Status: offline
    Re: HA ether type sniffer 2021/05/14 19:35:39 (permalink)
    0
    Hii,
    I got the same result when I ran a sniffer on my HA interface without any filters, but when I ran the sniffer using the HA ip addresses I was able to see the packets.
    Find IP address of HA:
    get system ha status 
    vcluster 1: standby 169.254.0.1
    diagnose sniffer packet any ' host 169.254.0.1 ' 4
    3.285134 port_ha in 169.254.0.2.2790 -> 169.254.0.1.53: udp 103
    3.755998 port_ha in 169.254.0.2.4853 -> 169.254.0.1.714: udp 86
    3.756022 port_ha in 169.254.0.2.4853 -> 169.254.0.1.714: udp 88
    3.756026 port_ha in 169.254.0.2.4853 -> 169.254.0.1.714: udp 82
    3.756030 port_ha in 169.254.0.2.4853 -> 169.254.0.1.714: udp 94
    3.756033 port_ha in 169.254.0.2.4853 -> 169.254.0.1.714: udp 78
    3.756036 port_ha in 169.254.0.2.4853 -> 169.254.0.1.714: udp 79
    3.756039 port_ha in 169.254.0.2.4853 -> 169.254.0.1.714: udp 79
    3.756042 port_ha in 169.254.0.2.4853 -> 169.254.0.1.714: udp 81
    4.269852 port_ha in 169.254.0.2.3010 -> 169.254.0.63.703: udp 496
     
    Hope this helps :) 
    #2
    Jump to:
    © 2021 APG vNext Commercial Version 5.5