Jacob Durham
asked on
Debug a single ip address on ASA 5515
I need to debug/monitor traffic from a specific IP on a Cisco ASA 5515.
I want the terminal to display information about traffic from a certain IP address in the terminal monitor of my ASA
I assume it something like debug ip 192.168.4.4
Is this possible?
I want the terminal to display information about traffic from a certain IP address in the terminal monitor of my ASA
I assume it something like debug ip 192.168.4.4
Is this possible?
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Thank you. This gave me what I needed.
ASA firewalls have a packet capture capability (like tcpdump) which can be configured to only capture specific packets, but I would guesss from your question that you are more interested in what the ASA does (allow/deny etc) to packets that involve a specific host.
if you were instead interested in what the ASA does to traffic that involves a specific adddress, you could set the log output to debug, and then filtered the log on the IP address of interest.