Capture function in FWSM

Answered Question
Apr 14th, 2010
User Badges:

Hi all,

I am trying to use the capture function in my FWSM on my cat6509.

The function is configured to capture on a certain interface on my firewall context, but I can't seem to capture any traffic (!).


Trying to fix this problem I upgraded to software version 3.2.17 with no luck.


Could you advice please.


Regards,

Trond

Correct Answer by Giuseppe Larosa about 7 years 1 month ago

Hello Trond,


the FWSM config guide lists some limitations to packet capture feature check if you are hitting one of them:


http://www.cisco.com/en/US/docs/security/fwsm/fwsm32/configuration/guide/troubl_f.html#wp1067860


you can use only an IPv4 ACL and you can only capture IP packets (no ARP or other non IP frames)


Hope to help

Giuseppe

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (1 ratings)
Loading.
Correct Answer
Giuseppe Larosa Wed, 04/14/2010 - 11:42
User Badges:
  • Super Silver, 17500 points or more
  • Hall of Fame,

    Founding Member

Hello Trond,


the FWSM config guide lists some limitations to packet capture feature check if you are hitting one of them:


http://www.cisco.com/en/US/docs/security/fwsm/fwsm32/configuration/guide/troubl_f.html#wp1067860


you can use only an IPv4 ACL and you can only capture IP packets (no ARP or other non IP frames)


Hope to help

Giuseppe

trond.fleitsche... Thu, 04/15/2010 - 05:31
User Badges:

Hi all,

Thanks for your reply.

It seems that the capture functioned after some time. And I learned that it is mandatory to apply an acl to the capture for it to function correctly

Ganesh Hariharan Thu, 04/15/2010 - 00:40
User Badges:
  • Purple, 4500 points or more
  • Community Spotlight Award,

    Member's Choice, February 2016

Hi all,

I am trying to use the capture function in my FWSM on my cat6509.

The function is configured to capture on a certain interface on my firewall context, but I can't seem to capture any traffic (!).


Trying to fix this problem I upgraded to software version 3.2.17 with no luck.


Could you advice please.


Regards,

Trond


Hi Trond,


Check out the below link for capturing packet in FWSM,Hope to Help !!


http://www.cisco.com/en/US/docs/security/fwsm/fwsm32/configuration/guide/troubl_f.html#wp1068063


Ganesh.H

Actions

This Discussion