Solved

CLI of Cisco ASA firewall

Posted on 2011-09-07
5
902 Views
Last Modified: 2012-05-12
#terminal monitor command in my asa ia not capturing any traffic.....what should i enable to capture the traffic using this command.

i tried the follwoing

(config)#logging enable
(config)#terminal monitor
0
Comment
Question by:Crazycrux
5 Comments
 
LVL 4

Expert Comment

by:denver218
ID: 36497632
ciscoasa#show logging
0
 
LVL 35

Expert Comment

by:Ernie Beek
ID: 36498005
Logging console info
0
 
LVL 35

Expert Comment

by:Ernie Beek
ID: 36498021
Or any other from debug to alert.
Just do a: logging console ?
Then you'll see the options.
0
 
LVL 2

Accepted Solution

by:
genie4all earned 25 total points
ID: 36499565
The terminal monitor only really affects the vty that you are currently telnetted or ssh'd into.  "terminal monitor" to enable you to see "logging monitor" from telnet.  "terminal no monitor" to disable it.  Console is on by default, but can be disabled.  The logging level of the console is not necessarily what you see because each level is configured independently.  A "show logging" will show you the level per logging destination.

logging monitor will not show anything on your console. try debugging something (e.g. execute debug telnet or debug ssh and try to ssh / telnet from a different machine to your device)
0
 

Assisted Solution

by:mahuen
mahuen earned 25 total points
ID: 36501959
The better way to get a capture is using the command "capture".

you have tu create an access-list with any name like "acl-in", then you have to create a capture with a name, associate it with an interface and you access-list:

access-list acl-in permit tcp 10.20.30.0 255.255.255.0 200.72.66.0 255.255.255.248 eq ftp

in the ingress interface
capture interesting-traffic-in access-list acl-in interface inside

and in the egress interface for example:
capture interesting-traffic-out access-list acl-in interface outside

then you can copy the capture and save it like a pcap file and open it with wire shark.

copy /pcap capture:interesting-traffic-out flash:interesting-traffic-out


usefull not?
0

Featured Post

What Is Threat Intelligence?

Threat intelligence is often discussed, but rarely understood. Starting with a precise definition, along with clear business goals, is essential.

Join & Write a Comment

Suggested Solutions

Title # Comments Views Activity
C3650 Web interface login not working 2 13
Cisco vlan question 12 39
Extending  a subnet 9 36
Cisco Air AP 6 28
Cisco Pix/ASA hairpinning The term, hairpinning, comes from the fact that the traffic comes from one source into a router or similar device, makes a U-turn, and goes back the same way it came. Visualize this and you will see something that looks …
Exchange server is not supported in any cloud-hosted platform (other than Azure with Azure Premium Storage).
Access reports are powerful and flexible. Learn how to create a query and then a grouped report using the wizard. Modify the report design after the wizard is done to make it look better. There will be another video to explain how to put the final p…
You have products, that come in variants and want to set different prices for them? Watch this micro tutorial that describes how to configure prices for Magento super attributes. Assigning simple products to configurable: We assigned simple products…

707 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

20 Experts available now in Live!

Get 1:1 Help Now