Fortigate CLI debug command

https://community.fortinet.com/t5/FortiGate/Troubleshooting-Tip-Using-the-FortiOS-built-in-packet-sniffer/ta-p/194222?externalID=11186
diagnose sniffer packet any 'host 10.1.1.3' 4

https://docs.fortinet.com/document/fortigate/6.2.3/cookbook/54688/debugging-the-packet-flow
diagnose debug enable
diagnose debug flow filter addr 10.1.1.3
diagnose debug flow show function-name enable
diagnose debug flow trace start 100
diagnose debug disable

檢查 routing table
get router info routing-table all
https://networkengineering.stackexchange.com/questions/7037/fortigate-reverse-path-check-fail