cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
984
Views
0
Helpful
2
Replies

PCAP Capture doesn't work

stephan.ochs
Level 1
Level 1

Hi

Yesterday I did a capture on my ASA 8.0(3)12. I can view the internal capture via https://ASA-IP/admin/capture/CapName and https://ASA-IP/capture/CapName.

But if I try to download the PCAP file I get the download dialog and an error "pcap from ASA-IP could not be downloaded". I have packets in my capture so there should be a PCAP file.

Any hints?

Stephan

1 Accepted Solution

Accepted Solutions

scandan
Level 1
Level 1

Hello stephan,

In order to download .pcap file you can use both CLI and Web Browser.

From CLI just copy the *.pcap file to a TFTP server

ASA#copy /pcap capture:cap_name tftp://tftp_ip_add

From web browser just add "/pcap" comment end of the "https://ip_add/capture/test/pcap" url.

I hope it will work fine.

Serhat

View solution in original post

2 Replies 2

scandan
Level 1
Level 1

Hello stephan,

In order to download .pcap file you can use both CLI and Web Browser.

From CLI just copy the *.pcap file to a TFTP server

ASA#copy /pcap capture:cap_name tftp://tftp_ip_add

From web browser just add "/pcap" comment end of the "https://ip_add/capture/test/pcap" url.

I hope it will work fine.

Serhat

Hello Serhat

Thanks for your hint.

It seems to be a problem with my browser.

I still can't open /pcap via https.

But I can copy the capture file to tftp server and view it with WireShark.

Stephan

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: