Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

What command line tools used to identify traffic?

Does anyone know of any command line tools that can be used to identify traffic type by port and ip addresses with source and destination? I have used ip nbar on routers but dont see it on the Cisco ASA? Is it possible?

4 REPLIES

Re: What command line tools used to identify traffic?

Hi Patrick,

You can look at the output of 'show conn all' which will show you source and destination IP addresses and ports. Syslogs are also useful to watch connections being built and torn down. Take a look at that output and let us know if that is what you're looking for.

Hope that helps.

-Mike

New Member

Re: What command line tools used to identify traffic?

It is commented in a following message that you can monitor in 'realtime'. But using 'show conn all' would be like a picture? Like a 1 second window? Or instant window?

Bronze

Re: What command line tools used to identify traffic?

You can also use the capture command to look at traffic real-time. It's basically like sniffing the traffic through your firewall, and can be exported to a packet analyzer.

To use the capture feature, first you have to create an access list that matches the traffic you are interested in watching. After that you can execute: capture access-list real-time

I've found that command to be very helpful.

Hope that helps,

--Brandon

New Member

Re: What command line tools used to identify traffic?

Thank you, This is exactly what I was looking for!

Thanks again,

Pat Beaven

244
Views
10
Helpful
4
Replies