ASA Captures

[manningjt07]

How do I configure a wireshark capture on the ASA?

[teatrodelsogno]

Wireshark?!?

Isn't enough the logging on the ASA?

Or in case, you can send the logs to an external syslog for further analyzing on it (also wireshar). But this is depending of which tools on syslog you're using.

regards

[rakeshvelagala]

What is the issue and what are you trying to check?

[David Johan Castro Fernandez]

Hi,

You can use this link to set up captures then, export them and analyze them on Wireshark:

https://supportforums.cisco.com/document/69281/asa-using-packet-capture-troubleshoot-asa-firewall-configuration-and-scenarios

Please don't forget to rate and mark as correct the helpful Post!

David Castro,

Regards,

[brianwilliams99]

Use the Packet Capture wizard. After you stop your capture, there is a button to "Save Captures" that will bring up another box asking for the save type as "Text" or "PCAP". Save it as a PCAP then open it with Wireshark.

If this is not what you are wanting, let us know.

Also, See this link, it may help.

http://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-next-generation-firewalls/118097-configure-asa-00.html

Please don't forget to rate and mark as correct the helpful Post!

Thanks

Brian W

[Ifrederick313]

Create your capture

enter the following command...

https://X.X.X.X/capture/testcap/pcap

Where X is the IP Address of the inside interface