FortiSwitch supports packet capture through various methods, but the Sniffer profile is specifically
capable of capturing traffic on both trunks and management interfaces. Here's why:
Sniffer Profile (B):
Versatile Capture: The sniffer profile in FortiSwitch is designed to capture traffic across different types
of interfaces, including trunks (where multiple VLANs are present) and management interfaces (used
for controlling and monitoring the switch).
Configuration Flexibility: You can configure sniffer profiles to target specific traffic, offering flexibility
in monitoring and troubleshooting network issues on both data and management planes.
Other Options:
SPAN (A) is used mainly for mirroring traffic to another port for analysis but is typically limited in its
ability to capture management interface traffic.
sFlow (C) and TCP dump (D) are useful tools but do not specifically align with the capability to
universally capture traffic across trunks and management interfaces in the context described.
Reference:
For further details on configuring and utilizing sniffer profiles on FortiSwitch, refer to the FortiSwitch
management documentation: Fortinet Product Documentation