0% found this document useful (0 votes)
62 views10 pages

Troubleshooting Tip - How To Utilize The FortiGate ... - Fortinet Community

This article provides a guide on using the FortiGate 'diagnose debug application' command to troubleshoot various FortiGate processes and daemons in FortiOS 7.4. It includes a comprehensive list of available processes and the commands needed to initiate and manage debugging sessions. Additionally, it outlines how to modify the duration of the debug session and terminate it once the necessary output is collected.

Uploaded by

kushika
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
0% found this document useful (0 votes)
62 views10 pages

Troubleshooting Tip - How To Utilize The FortiGate ... - Fortinet Community

This article provides a guide on using the FortiGate 'diagnose debug application' command to troubleshoot various FortiGate processes and daemons in FortiOS 7.4. It includes a comprehensive list of available processes and the commands needed to initiate and manage debugging sessions. Additionally, it outlines how to modify the duration of the debug session and terminate it once the necessary output is collected.

Uploaded by

kushika
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
You are on page 1/ 10

Troubleshooting Tip: How to utilize the FortiGate ... - Fortinet Community https://community.fortinet.com/t5/tkb/articleprintpage/tkb-id/TKB20/artic...

Fortinet Community > Knowledge Base > FortiGate


> Troubleshooting Tip: How to utilize the FortiGate ...

Matt_L Staff

Created on 05-01-2025 08:21 AM

Article Id 389582
Troubleshooting Tip: How to utilize the FortiGate 'diagnose debug application'
command for troubleshooting various FortiGate processes/daemons

Description This article shows how to utilize the FortiGate 'diag debug application'
command to troubleshoot issues with FortiGate processes/daemons.
Scope FortiOS 7.4.

1 de 10 07/05/2025, 18:04
Troubleshooting Tip: How to utilize the FortiGate ... - Fortinet Community https://community.fortinet.com/t5/tkb/articleprintpage/tkb-id/TKB20/artic...

Solution To see the complete list of processes/daemons that are available to be run with
the 'diagnose debug application' command, use the following command:

diagnose debug application ?

Below is a list of the available FortiGate processes/daemons that is displayed


when running the above command, as well as their respective descriptions:

Galileo-kvm52 # diag debug application ?


smtp ....................................SMTP proxy.
pop3 ....................................POP3 proxy.
imap ....................................IMAP proxy.
nntp .....................................NNTP proxy.
proxy ...................................Proxy.
radvd ...................................Router adv
daemon.
miglogd ................................Log daemon.
kmiglogd ..............................Kernel Log daemon.
forticldd ...............................FortiCloud
daemon.
alertmail ..............................Alert mail daemon.
ppp .....................................PPP daemon.
l2tp .....................................L2TP daemon.
pptp ....................................PPTP daemon.
pptpc ...................................PPTP client.
authd ...................................Auth daemon.
foauthd ................................FortiguardOverride
auth daemon.
fcnacd ..................................FortiClient NAC
daemon.
fcld ......................................Fclicense
daemon.
fssod ....................................FSSO daemon.
clearpass ..............................ClearPass daemon.

2 de 10 07/05/2025, 18:04
Troubleshooting Tip: How to utilize the FortiGate ... - Fortinet Community https://community.fortinet.com/t5/tkb/articleprintpage/tkb-id/TKB20/artic...

dhcps ...................................DHCP server.


dhcp6s .................................DHCPv6 server.
update .................................Update daemon.
vpd ......................................VPN policy
daemon.
fnbamd .................................FortiGate non-
blocking auth daemon.
eap_proxy .............................EAP proxy daemon.
ipsmonitor .............................IPS monitor.
ipsengine ...............................IPS sensor.
urlfilter ..................................Urlfilter
daemon.
wf_monitor ............................WF monitor, parent
of urlfilter daemon.
ddnscd DDNS .........................client daemon.
dhcprelay DHCP ......................relay daemon.
dhcp6r ...................................DHCPv6 relay.
snmpd ...................................SNMP daemon.
chassis ..................................Chassis daemon.
wpad .....................................Port access
entity daemon.
wpad-crash-hexdump ..............Dump wpad crash in
hexedecimal format.
wpa-show-keys ......................Dump keys in wpad or
wpas log.
wpa-timestamp ......................Dump timestamp in wpad
or wpas log.
wifi .......................................WiFi setting.
dnp .......................................DNP proxy
daemon.
icond .....................................Industrial
Connectivity daemon.
dnsproxy ................................DNS proxy module.
sflowd ....................................sFlow protocol

3 de 10 07/05/2025, 18:04
Troubleshooting Tip: How to utilize the FortiGate ... - Fortinet Community https://community.fortinet.com/t5/tkb/articleprintpage/tkb-id/TKB20/artic...

module.
hatalk ....................................HA protocol
module.
hasync ...................................HA
synchronization module.
harelay ..................................HA relay module.
hamonitord .............................HA monitor module.
quarantine ..............................Quarantine daemon.
dhcpc .....................................DHCP client
module.
zebos-launcher ........................ZebOS launcher
daemon.
zebos .....................................ZebOS
radiusd ...................................RADIUS daemon.
sshd .......................................Sshd daemon.
sslvpn .....................................SSL-VPN proxy
daemon
sessionsync .............................Session sync
daemon.
ipldbd .....................................Ipldbd daemon.
crl-update ...............................CRL update in
forticron daemon.
cert-update .............................Certificate update
in forticron daemon.
alarmd ....................................Alarmd daemon.
forticron ..................................Forticron
daemon.
uploadd ...................................Upload daemon.
smbcd .....................................SMB client
daemon.
samld ......................................SAML SSO
daemon.
acd ..........................................Aggregate
Controller

4 de 10 07/05/2025, 18:04
Troubleshooting Tip: How to utilize the FortiGate ... - Fortinet Community https://community.fortinet.com/t5/tkb/articleprintpage/tkb-id/TKB20/artic...

alicloud-sdn ..............................AliCloud SDN


controller
alicloud-ha ...............................AliCloud HA
controller
sip ..........................................SIP ALG.
sccp ........................................SCCP ALG.
ike ..........................................IKE daemon.
fgfmd ......................................FortiGate/
FortiManager communication daemon.
wccpd ......................................WCCP daemon.
waocs ......................................WAN
acceleration object cache storage.
wabcs ......................................WAN
acceleration byte cache storage.
garpd .......................................VIP gratuitous
ARP daemon.
scep .........................................SCEP
ipsufd .......................................IPS URL
filter resolver daemon.
cw_acd .....................................Capwap AC
daemon.
cw_acd_helper ...........................Capwap AC helper
daemon.
cw_acd_wpad ............................CAPWAP AC and WPA
daemon (wpad).
cw_acd_wlev .............................CAPWAP AC daemon
wireless event notification.
fortilinkd ...................................fortilink
daemon
flcfgd .......................................fortilink
configuration daemon
flpold .......................................FortiLink
policy daemon.
fltund .......................................FortiLink

5 de 10 07/05/2025, 18:04
Troubleshooting Tip: How to utilize the FortiGate ... - Fortinet Community https://community.fortinet.com/t5/tkb/articleprintpage/tkb-id/TKB20/artic...

tunnel daemon.
syslogd .....................................syslogd
daemon.
locallogd ...................................locallogd
daemon.
fgtlogd .....................................fgtlogd
daemon.
reportd ....................................report daemon
vrrpd .......................................VRRP daemon.
fgd_alert ..................................FortiGuard
alert message.
ntpd ........................................NTPd daemon.
fsd ..........................................Forti-start
daemon.
dlpfingerprint ............................DLP fingerprint
daemon.
nodejs .....................................Node.js daemon.
httpsd .....................................HTTPS daemon.
spareblock ...............................Set debug spare
block count.
lldptx ......................................Link Layer
Discovery Protocol (LLDP) Transmitter
tvc ..........................................SSL-VPN
client
dhcp6c ....................................DHCPv6 client.
server-probe ............................Server probe
daemon.
link-monitor ..............................Link monitor
daemon.
link-monitor-passive ...................Link monitor
daemon.
pppoed .....................................PPPoE client
Daemon.
ovrd .........................................Override

6 de 10 07/05/2025, 18:04
Troubleshooting Tip: How to utilize the FortiGate ... - Fortinet Community https://community.fortinet.com/t5/tkb/articleprintpage/tkb-id/TKB20/artic...

daemon.
iotd ..........................................IoT device
info daemon.
extenderd .................................Extender Wan
daemon.
oaas_agent ...............................OaaS agent
daemon.
awsd .........................................Amazon Web
Services (AWS) daemon.
netxd ........................................NetX REST API
daemon.
cloudinitd ...................................cloudinitd
daemon.
gcpd .........................................Google Cloud
Platform daemon.
azd ...........................................Microsoft
Azure daemon.
azd-ha ......................................Microsoft
Azure daemon.
ocid ..........................................Oracle Cloud
Infrastructure (OCI) daemon
openstackd ................................OpenStack SDN
connector daemon.
kubed .......................................Kubernetes
daemon.
vmwd .......................................VMware vSphere
daemon
init ...........................................System init
process.
mrd ..........................................Mobile router
daemon.
radius-das .................................RADIUS DAS
daemon.
csfd ..........................................Security

7 de 10 07/05/2025, 18:04
Troubleshooting Tip: How to utilize the FortiGate ... - Fortinet Community https://community.fortinet.com/t5/tkb/articleprintpage/tkb-id/TKB20/artic...

Fabric daemon.
fsvrd .........................................FortiService
daemon.
sdwan .......................................SD-WAN daemon.
route-tag ...................................route-tag
daemon.
ftm-push ...................................FTM-Push
daemon.
npd ..........................................NP7 daemon.
cmp .........................................CMPv2.
sdncd .......................................SDN Connector
daemon.
ptpd .........................................Precision
Time Protocol daemon.
autod ........................................Automation
daemon.
bfdd ..........................................BFD daemon.
evpnd ........................................EVPN daemon.
fsso_ldap ...................................FSSO LDAP
daemon.
sepmd .......................................Symantec EPM
daemon.
acid ................................Cisco Application
Centric Infrastructure (Direct Connection) daemon
ipamd ........................................IP Address
Management daemon.
ibmd ..........................................IBM Cloud
Infrastructure daemon.
vned ..........................................Virtual
network enabler daemon.
sfupgraded ..................................Security
Fabric Upgrade daemon.
ikecrypt ......................................Multi-
process IKE crypto daemon.

8 de 10 07/05/2025, 18:04
Troubleshooting Tip: How to utilize the FortiGate ... - Fortinet Community https://community.fortinet.com/t5/tkb/articleprintpage/tkb-id/TKB20/artic...

fds_notify ....................................Update
notification daemon.
ntnxd Nutanix ..............................Prism Central
daemon.
sapd SAP .....................................Control
daemon.
speedtest ....................................Speed test
execution daemon.
speedtestd ...................................Speed test
server daemon.
ipamsd ........................................IPAM server
daemon.
eap_supp .....................................EAP
supplicant daemon.
lpmd ...........................................LPM daemon.
pcpd ............................................PCP server
daemon.
kmipd ..........................................KMIP daemon
cloudapid .....................................Cloud
service communication daemon.
est
..............................................Enrollment
over Secure Transport

To debug on any of the above listed processes/daemons, use the below


commands:

diagnose debug reset


diagnose debug application <process/daemon name> -1
diagnose debug console timestamp enable
diagnose debug enable

Note: By default, the debug will run for a maximum of 30 minutes, but this can
be modified by including the following command in the command list above:

9 de 10 07/05/2025, 18:04
Troubleshooting Tip: How to utilize the FortiGate ... - Fortinet Community https://community.fortinet.com/t5/tkb/articleprintpage/tkb-id/TKB20/artic...

diagnose debug duration xxxx (The duration range is from 1 minute


to a max of 99999 minutes.)

Once the output has been gathered, use the following commands to terminate
the debug:

diagnose debug disable


diagnose debug reset

149
 0 Kudos

Article Feedback

10 de 10 07/05/2025, 18:04

You might also like