Solved

CLI of Cisco ASA firewall

Posted on 2011-09-07
5
906 Views
Last Modified: 2012-05-12
#terminal monitor command in my asa ia not capturing any traffic.....what should i enable to capture the traffic using this command.

i tried the follwoing

(config)#logging enable
(config)#terminal monitor
0
Comment
Question by:Crazycrux
5 Comments
 
LVL 4

Expert Comment

by:denver218
ID: 36497632
ciscoasa#show logging
0
 
LVL 35

Expert Comment

by:Ernie Beek
ID: 36498005
Logging console info
0
 
LVL 35

Expert Comment

by:Ernie Beek
ID: 36498021
Or any other from debug to alert.
Just do a: logging console ?
Then you'll see the options.
0
 
LVL 2

Accepted Solution

by:
genie4all earned 25 total points
ID: 36499565
The terminal monitor only really affects the vty that you are currently telnetted or ssh'd into.  "terminal monitor" to enable you to see "logging monitor" from telnet.  "terminal no monitor" to disable it.  Console is on by default, but can be disabled.  The logging level of the console is not necessarily what you see because each level is configured independently.  A "show logging" will show you the level per logging destination.

logging monitor will not show anything on your console. try debugging something (e.g. execute debug telnet or debug ssh and try to ssh / telnet from a different machine to your device)
0
 

Assisted Solution

by:mahuen
mahuen earned 25 total points
ID: 36501959
The better way to get a capture is using the command "capture".

you have tu create an access-list with any name like "acl-in", then you have to create a capture with a name, associate it with an interface and you access-list:

access-list acl-in permit tcp 10.20.30.0 255.255.255.0 200.72.66.0 255.255.255.248 eq ftp

in the ingress interface
capture interesting-traffic-in access-list acl-in interface inside

and in the egress interface for example:
capture interesting-traffic-out access-list acl-in interface outside

then you can copy the capture and save it like a pcap file and open it with wire shark.

copy /pcap capture:interesting-traffic-out flash:interesting-traffic-out


usefull not?
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Overview The Cisco PIX 501, PIX 506e, ASA 5505 and ASA 5510 (most if not all of this information will be relevant to the PIX 515e but I do not have a working configuration handy to verify the validity) are primarily used within small to medium busi…
This past year has been one of great growth and performance for OnPage. We have added many features and integrations to the product, making 2016 an awesome year. We see these steps forward as the basis for future growth.
Both in life and business – not all partnerships are created equal. As the demand for cloud services increases, so do the number of self-proclaimed cloud partners. Asking the right questions up front in the partnership, will enable both parties …
Both in life and business – not all partnerships are created equal. Spend 30 short minutes with us to learn:   • Key questions to ask when considering a partnership to accelerate your business into the cloud • Pitfalls and mistakes other partners…

777 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question