An administrator is using the FortiGate built-in sniffer to capture HTTP traffic between a client and a server, however, the sniffer output shows only the packets related with TCP session setups and disconnections. Why?

A. The administrator is running the sniffer on the internal interface only.

B. The filter used in the sniffer matches the traffic only in one direction.

C. The FortiGate is doing content inspection.

D. TCP traffic is being offloaded to an NP6.