Custom Search

To advertise on this site email advertise@goatnetworking.com

How to create a capture from a Cisco ASA in .pcap format?

Site Admin
User avatar
Posts: 368
Joined: Wed Jan 04, 2012 2:36 pm

How to create a capture from a Cisco ASA in .pcap format?

Postby admin » Tue May 22, 2012 1:02 pm

How to export a capture from a Cisco ASA in .pcap format?

1. Create your ACL with the specifics of what you are looking for

Access-list 100 permit tcp host <source ip> host <destination ip> eq port
Access-list 100 permit tcp host <destination ip> host <source ip> eq port

2. Create your capture's and apply them to the inbound interface on the ASA

capture <capture name> access-list <acl name/number> buffer 700000 interface <interface traffic is entering> packet-length <packet length: ex:1518)

3. Have user perform a test
4. Copy the capture to your PC

Use a web browser and go to https://<ASA's IP>/capture/<capture name>/pcap

It will prompt you to log in, then to download the file.

You can look at the output on the ASA with the "show capture <capture-name>" command.


Return to Network Security

Twitter Facebook

Who is online

Users browsing this forum: No registered users and 1 guest