Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Is the log buffer good for anything?

To all:

As a person just starting to use the Cisco ASA5505, I am trying to make sense of all the level 2 (critical) and level 3 (error) messages that are showing up in the log buffer.  However when I posted asking about the seriousness of these messages, or to ignore them or not, there was no reply.

So I am forced to ask again, do we need to pay attention to the log buffer messages, or are they just for show? (sarcasm)

I see these messages whenever someone on the local inside interface is surfing the web and is at a web site.  It almost appears like the web site itself is infected and other IPs are probing whenever a client lands on the web site, but I am not sure of this interpretation.

Do I need to stick in a packet analyzer between the static IP gateway and the ASA 5505 and trap every packet and take a careful look?

I would like to use the Cisco ASA5505 to its fullest advantage, but not spin my wheels fruitlessly either.

How much credibility should we place in these log messages?

Cisco Employee

Re: Is the log buffer good for anything?

The question is if you need to pay attention to the log messages. The answer is yes. The buffer is just one place you can store your messages to look at them live on the box and not on a syslog server.

I am not sure what messages are the ones you are referring to because I haven't seen them.

The firewall itself can capture packets so you can also fo that to analyze

I hope it helps.


Cisco Employee

Re: Is the log buffer good for anything?

Syslogs messages help greatly when you are troubleshooting a problem. Especially the buffer log. It wraps very quickly and overwrites the default 512K buffer.

Some companies collect these using a syslog server and archive them for statistic purpose.

TAC relies very heavily on logs when troubleshooting any and all problems. So, these are certainly not for show and are very valuable for troubleshooting.

You can more about various logging in this link:


CreatePlease to create content