asa packet capture

Experts,
 
I set up  a packet capture via CLI, then use internet explorer to export it to a pcap, but when I open the pcap file I always get the warning that "the capture file appears to have been cut short in the middle of a packet".

After acknowledging the warning, the file opens normally.   Am I supposed to stop the packet capture via CLI before I go to export into pcap? If so, how?
trojan81Asked:
Who is Participating?
 
ffleismaSenior Network EngineerCommented:
personally, I do packet capture on ASA via ASDM-packet capture wizard.

much easier and files are easily downloadable. Also, doing packet capture wizard does not affect running configuration for some reason.

if you can, using ASDM for packet capture might be a nice option
0
 
Ryan LanhamCommented:
Try stopping the capture process with ctrl+c while you are in the CLI. Then export.
0
 
Robert Sutton JrSenior Network ManagerCommented:
Are you using the "headers-only" in your cli command? If so, don't and then retry.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.