Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Troubleshoot dropped TCP-443 connections on PIX

Experiencing intermittent 443 connection issues to ASP.  I am looking for best debugging tips for TCP which output would be directed to syslog server.  Any suggestions?? 

2 REPLIES
Cisco Employee

Re: Troubleshoot dropped TCP-443 connections on PIX

Hello,

SInce your issue is intermittent, I would suggest you to set up capturess (By far the best troubleshooting tool) for interesting traffic and then export the binary captures using ASDM and then analyse them using network analyser like Wireshark (www.wireshark.org)

Here is how you can setup captures :

https://supportforums.cisco.com/docs/DOC-1222

You can get binary captures (PROVIDED you have ASDM access enabled for inside ifc of ASA) :

https:///capture//pcap

Try to use packet length 1522 or above , since in  usual packet captures you can only see first 68 bytes of data i.e. packets get truncated. Here is an example :

capture capout access-list test packet-len 1522 interface outside

Also, you can check service-policy and ASP drops for further troubleshooting.

HTH

Vijaya

Re: Troubleshoot dropped TCP-443 connections on PIX

Experiencing
intermittent 443 connection issues to ASP.  I am looking for best
debugging tips for TCP which output would be directed to syslog
server.  Any suggestions??  

Hi,

As per your query you need to capture packets in firewall interface as suggested by Vijaya then only you can identify the exact problem for dropping of TCP port 443 and also just check that TCP port 443 is working properly at the remote host or not.

Check out the below link for captureing the packets

http://www.cisco.com/en/US/products/ps6120/products_tech_note09186a0080a9edd6.shtml

If helpful do rate the valuable post.

Regards

Ganesh.H

692
Views
0
Helpful
2
Replies
CreatePlease login to create content