capture circular-buffering to syslog server

Unanswered Question
Mar 15th, 2010


I'm running 8.0.5 and want to setup capture with “circular-buffer” and log it to my syslog server. Can I do this and if so, how?

Will this have a huge effect on my cpu/mem assuming default buffer at 512?


I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Kureli Sankar Mon, 03/15/2010 - 20:34


If you want to capture your inside host's internet browsing traffic, you can issue the following with a circular-buffer command

cap capin int inside match tcp host any eq 80 circular-buffer buffer 10000000

This will create a 10MB capture file and continue collecting fresh packets after the 10MB buffer gets full.

I am not sure what you mean by send it to syslog server.

You have to issue "sh cap capin" or save the capture using tftp or http


capture command reference:



This Discussion