This article describes how to capture packets directly at the Virtual IP interface.
Scope
FortiOS 7.2 and above
Solution
Packet capture using the GUI at the VIP interface is useful for troubleshooting.
At the Firewall GUI navigate to Policy & Objects > Virtual IPs then rest the mouse pointer on the interface and then select ‘Packet Capture’.
This option will directly initiate a packet capture at the interface.