Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
New Member

Copy capture buffer via tftp using pcap keyword

I am running FWSM Firewall Version 3.2(3). I am trying to copy the contents of my capture buffer so that I can look at it with Wireshark. The documentation states that you can use the pcap keyword for this. I cannot get the firewall to recognize said keyword. Documentation states this was introduced in 2.2(1). Has anyone done this? Thank you.

2 REPLIES
Silver

Re: Copy capture buffer via tftp using pcap keyword

If the FWSM works like a PIX/ASA, this should work.

1. Create an ACL to capture the "interesting" traffic

ex. access-list cap1 extended permit ip host 1.1.1.1 host 2.2.2.2

2. Create a capture to use your ACL

ex. cap my_cap access-list cap1 interface outside

3. View the capture

ex. show cap my_cap

4. Download the cap (ASDM must be setup)

ex. https:///cap/cap1/pcap

Jay

New Member

Re: Copy capture buffer via tftp using pcap keyword

It does not seem to, but thank you.

373
Views
0
Helpful
2
Replies
CreatePlease to create content