How do you enable/upload packet captures on ASA5520

Answered Question
Mar 1st, 2007

I need to setup packet sniffs on the inside and outside interfaces of the ASA for both inside and outside interface monitoring. What is the syntax for the monitoring, and how do I save/copy the .pcap file off the asa? Also, how do you specify the random source port (gt1023)?

Here's my stab at an inside example:

packet-tracer input inside udp 10.1.0.1 xxx 207.1.1.1 sip detailed

Also, can I run an inside and outside trace simultaneously?

Thanks,

-Scott

I have this problem too.
0 votes
Correct Answer by ggilbert about 9 years 7 months ago

Scott,

After setting the capture

browse to

http://ipadd of pix/capture/pcap/sip-trace

Make sure you have http enabled on that interface you are trying to access.

Rate it, if this helps!!

gilbert

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (1 ratings)
Loading.
swharvey Thu, 03/01/2007 - 16:44

I think I got the trace right (correct me if I'm wrong), but need to figure out how to get it off the box:

capture sip-test trace access-list sip-trace interface inside

access-list sip-trace permit udp 10.1.1.1 gt 1023 207.1.1.1 eq 5060

Thanks,

-Scott

Correct Answer
ggilbert Thu, 03/01/2007 - 20:29

Scott,

After setting the capture

browse to

http://ipadd of pix/capture/pcap/sip-trace

Make sure you have http enabled on that interface you are trying to access.

Rate it, if this helps!!

gilbert

Actions

This Discussion