Cisco ASA packet capture

Command and operational reference for Cisco ASA packet capture.

Commands

Packet capture

(config)# access-list capture_acl extended permit ip host 1.1.1.1 host 2.2.2.2
(config)# access-list capture_acl extended permit ip host 2.2.2.2 host 1.1.1.1
# capture capture_name interface interface_name access-list capture_acl
# clear capture capture_name
# show capture capture_name | inc 1.1.1.1
! wget -O capture_name.pcap --user=asa_user --password=asa_password https://asa_ip/capture/capture_name/pcap
# no capture capture_name

# capture capturename interface outside match tcp host 2.2.2.2 any eq 443 
# show capture capturename

# capture capturename interface inside match ip 192.168.10.10 255.255.255.255 any
# no capture capturename interface inside

See also

• Cisco Systems