Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements
Step-by-Step Configuration and Troubleshooting Best Practices for the NGFW, NGIPS and AMP Technologies A Visual Guide to the Cisco Firepower Threat Defense (FTD)
New Member

How to monitor firewall is droping UDP packets?

Can you tell me the command I can use to see how many packets are getting droped on my pix.

2 REPLIES
Silver

Re: How to monitor firewall is droping UDP packets?

This command is 'show asp drop'. It will tell you all of the various reasons PIX/ASAs dropped packets. This info can be quite useful during troubleshooting because it can allow you to quickly ascertain a potential issue.

Silver

Re: How to monitor firewall is droping UDP packets?

If you want to test whether specific traffic is getting through, create a capture like below.

define interesting traffic

access-list cap1 extended permit ip 1.1.1.1 255.255.255.255 2.2.2.2 255.255.255.255

create and apply capture

cap cap1 access-list cap1 interface outside

view capture

sho cap cap1

download capture (open w/ Ethereal)

https:///capture/cap1/pcap

*** Please rate if this helps ***

143
Views
10
Helpful
2
Replies
CreatePlease to create content