example:

If you want to capture your inside host's internet browsing traffic, you can issue the following with a circular-buffer command

cap capin int inside match tcp host 10.10.10.1 any eq 80 circular-buffer buffer 10000000

This will create a 10MB capture file and continue collecting fresh packets after the 10MB buffer gets full.

I am not sure what you mean by send it to syslog server.

You have to issue "sh cap capin" or save the capture using tftp or http

https:///capture/capin/pcap

capture command reference: http://www.cisco.com/en/US/docs/security/asa/asa82/command/reference/c1.html#wp2129312

-KS