Fortigate - Sniffing

Sniff traffic for any interface using port 5060 for any protocol:

diag sniffer packet any 'port 5060'

Sniff traffic for interface port16 for source or destination host 192.168.0.1 and port 5060 for any protocol:

diag sniffer packet port16 'host 192.168.0.1 and port 5060'