Free tool · No upload · No sign-up
Paste raw diagnose debug flow output and read it as packet walks instead of kernel functions: session, routing, policy and NAT steps in plain English, grouped per trace, with the drop reason highlighted and what to check next. Everything runs in your browser.
Works with FortiOS 6.x and 7.x flow traces (with or without show function-name enable — function names make the decode richer). Unrecognised lines are kept and shown raw.
diagnose debug flow filter clear diagnose debug flow filter addr 10.20.1.25 diagnose debug flow filter proto 6 diagnose debug flow filter port 443 diagnose debug flow show function-name enable diagnose debug flow trace start 50 diagnose debug enable # ... reproduce the problem ... diagnose debug disable diagnose debug flow trace stop diagnose debug flow filter clear
Filter as tightly as you can — an unfiltered flow trace on a busy box is noisy and briefly expensive. Always diagnose debug disable when done. On multi-VDOM units, enter the VDOM first.