09-25-2006 11:01 PM - edited 02-21-2020 01:11 AM
Which analog PIX's command -
debug packet src/dst x.x.x.x netmask y.y.y.y
on ASA device?
09-26-2006 12:59 AM
debug packet is no longer current on the 7x software - you want to use the capture feature.
e.g.
Create an access list with traffic you're interested in
access-list cap_traffic extended permit ip host 192.168.1.2 any
continue adding to this ACL depending on how much traffic you're interested in..
access-list cap_traffic extended permit tcp any host 192.168.1.2 eq www
capture
To view active capture sessions:
sh cap
To view the details of a capture session
sh cap
Use the no form to end capture sessions then clean up your ACL's..
There are many variations to the capture command:
access-list Capture packets that match access-list
buffer Configure size of capture buffer, default is 512 KB
circular-buffer Overwrite buffer from beginning when full, default is
non-circular
ethernet-type Capture Ethernet packets of a particular type, default is IP
interface Capture packets on a specific interface
packet-length Configure maximum length to save from each packet, default
is 68 bytes
trace Trace the captured packets
type Capture packets based on a particular type
Hope this helps
Paul.
09-26-2006 08:26 AM
If you would like to view the capture in Ethereal, follow the following method...
1. Navigate to https://
2. Download the capture
3. Open with Ethereal
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide