CISCO-PCAP PACKET CAPTURE IN ASA

Perform a pcap packet capture and copy the file to local system

Syntex:

#capture <Name for capture> type raw-data match ip  <source IP/Network> <Network Mask> <destination IP/Network> <Network Mask>

#capture <Name for capture> packet-length <14-9216> buffer <1534-33554432>
#capture <Name for capture> interface <Name of interface to capture on>

Copy the capture using HTTP:

# http server enable
#http 0.0.0.0 0.0.0.0 <MGMT Interface>

View packet capture inside the browser
https://<user name>:<password>@<fw-ip>/capture/<capture-name>
Copy Pcap file using http
https://<user name>:<password>@<fw-ip>/capture/<capture-name>/pcap


https://supportforums.cisco.com/document/12013521/method-obtain-packet-capture-asa

No comments:

Post a Comment