cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1088
Views
0
Helpful
2
Replies

Troubleshoot dropped TCP-443 connections on PIX

chrisb
Level 1
Level 1

Experiencing intermittent 443 connection issues to ASP.  I am looking for best debugging tips for TCP which output would be directed to syslog server.  Any suggestions?? 

2 Replies 2

vilaxmi
Cisco Employee
Cisco Employee

Hello,

SInce your issue is intermittent, I would suggest you to set up capturess (By far the best troubleshooting tool) for interesting traffic and then export the binary captures using ASDM and then analyse them using network analyser like Wireshark (www.wireshark.org)

Here is how you can setup captures :

https://supportforums.cisco.com/docs/DOC-1222

You can get binary captures (PROVIDED you have ASDM access enabled for inside ifc of ASA) :

https:///capture//pcap

Try to use packet length 1522 or above , since in  usual packet captures you can only see first 68 bytes of data i.e. packets get truncated. Here is an example :

capture capout access-list test packet-len 1522 interface outside

Also, you can check service-policy and ASP drops for further troubleshooting.

HTH

Vijaya

Ganesh Hariharan
VIP Alumni
VIP Alumni

Experiencing
intermittent 443 connection issues to ASP.  I am looking for best
debugging tips for TCP which output would be directed to syslog
server.  Any suggestions??  

Hi,

As per your query you need to capture packets in firewall interface as suggested by Vijaya then only you can identify the exact problem for dropping of TCP port 443 and also just check that TCP port 443 is working properly at the remote host or not.

Check out the below link for captureing the packets

http://www.cisco.com/en/US/products/ps6120/products_tech_note09186a0080a9edd6.shtml

If helpful do rate the valuable post.

Regards

Ganesh.H

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: