Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements
Step-by-Step Configuration and Troubleshooting Best Practices for the NGFW, NGIPS and AMP Technologies A Visual Guide to the Cisco Firepower Threat Defense (FTD)
Community Member

ASA 5520 Logging inaccuracies

Hi,

This may seem strange, but i am having this weird problem when looking at the ASA 5520 logging from ASDM.

When i opened up the Real-Time Logging in ASDM, i noticed that the Source and Destination IP and ports are swapped. For example, my host has an IP of 172.16.1.1, accessing a server 123.123.123.123 @ TCP 80. When i look at the traffic logging, the Source IP shows 123.123.123.123 and Source port TCP 80, destination IP shows 172.16.1.1 and Dest. Port shows some random generated high port.


I did not noticed when this problem occurred, just realised it recently while doing some checking. Any ideas what may cause this?

Or is it time to reboot the firewall?

Everyone's tags (2)
2 REPLIES
Cisco Employee

Re: ASA 5520 Logging inaccuracies

Which version of ASDM is this?

There is this bug:


CSCta42388    Source and Destination not correct in Real-Time Log Viewer

Fixed in 6.2(1.55) and 6.2(2.50) and later.

Community Member

Re: ASA 5520 Logging inaccuracies

Using 6.1(5)57

Maybe thats the reason. I shall go patch up to ASDM 6.2 and see if the problem still occurs.

Thanks!

429
Views
0
Helpful
2
Replies
CreatePlease to create content