From S23Wiki
Revision as of 08:07, 1 July 2014 by DrOwl (Talk | contribs)

Jump to: navigation, search

Some notes on working with Cisco ASA's

Commands on an asa 8.3 and above

Capture packets (like linux tcpdump/ Solaris snoop)

Start a Capture

  1. capture [name] interface [interface name] match [protical (ip/icmp/tcp/udp)] host [source host (x.x.x.x/any)] [Dest host (x.x.x.x/any)]

Stop the capture but keep the data

  1. no capture [name] interface [interface name]

List Caputres

  1. show capture [name]

Delete the capture

  1. no capture [name]


# capture SH interface extern match ip host any
# show capt
capture SH type raw-data [Capturing - 14486 bytes] 
  match ip host any 
# show capture SH

71 packets captured

   1: 16:47:19.884750 >  udp 42 
   2: 16:47:19.885086 >  udp 238 

packet tracer =

  1. packet-tracer input [interface name] [protical (icmp/tcp/udp)] [source host (x.x.x.x)] [source port] [dest host (x.x.x.x)] [desk port] (detailed)


  1. packet-tracer input external tcp 64216 53 detailed