08-19-2008 09:36 AM - edited 03-11-2019 06:32 AM
Does anyone know of any command line tools that can be used to identify traffic type by port and ip addresses with source and destination? I have used ip nbar on routers but dont see it on the Cisco ASA? Is it possible?
08-19-2008 11:08 AM
Hi Patrick,
You can look at the output of 'show conn all' which will show you source and destination IP addresses and ports. Syslogs are also useful to watch connections being built and torn down. Take a look at that output and let us know if that is what you're looking for.
Hope that helps.
-Mike
08-25-2008 10:48 AM
It is commented in a following message that you can monitor in 'realtime'. But using 'show conn all' would be like a picture? Like a 1 second window? Or instant window?
08-20-2008 01:55 PM
You can also use the capture command to look at traffic real-time. It's basically like sniffing the traffic through your firewall, and can be exported to a packet analyzer.
To use the capture feature, first you have to create an access list that matches the traffic you are interested in watching. After that you can execute: capture
I've found that command to be very helpful.
Hope that helps,
--Brandon
08-25-2008 06:39 AM
Thank you, This is exactly what I was looking for!
Thanks again,
Pat Beaven
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: