Solved: Capture function in FWSM

trond.fleitscher · ‎04-14-2010

Hi all,

I am trying to use the capture function in my FWSM on my cat6509.

The function is configured to capture on a certain interface on my firewall context, but I can't seem to capture any traffic (!).

Trying to fix this problem I upgraded to software version 3.2.17 with no luck.

Could you advice please.

Regards,

Trond

Giuseppe Larosa · ‎04-14-2010

Hello Trond,

the FWSM config guide lists some limitations to packet capture feature check if you are hitting one of them:

http://www.cisco.com/en/US/docs/security/fwsm/fwsm32/configuration/guide/troubl_f.html#wp1067860

you can use only an IPv4 ACL and you can only capture IP packets (no ARP or other non IP frames)

Hope to help

Giuseppe

View solution in original post

Giuseppe Larosa · ‎04-14-2010

Hello Trond,

the FWSM config guide lists some limitations to packet capture feature check if you are hitting one of them:

http://www.cisco.com/en/US/docs/security/fwsm/fwsm32/configuration/guide/troubl_f.html#wp1067860

you can use only an IPv4 ACL and you can only capture IP packets (no ARP or other non IP frames)

Hope to help

Giuseppe

trond.fleitscher · ‎04-15-2010

Hi all,

Thanks for your reply.

It seems that the capture functioned after some time. And I learned that it is mandatory to apply an acl to the capture for it to function correctly

Ganesh Hariharan · ‎04-15-2010

Hi all,
I am trying to use the capture function in my FWSM on my cat6509.
The
function is configured to capture on a certain interface on my firewall
context, but I can't seem to capture any traffic (!).
Trying to fix this problem I upgraded to software version 3.2.17 with no luck.
Could you advice please.
Regards,
Trond

Hi Trond,

Check out the below link for capturing packet in FWSM,Hope to Help !!

http://www.cisco.com/en/US/docs/security/fwsm/fwsm32/configuration/guide/troubl_f.html#wp1068063

Ganesh.H