ASA Delayed Packet Capture logs

matt.hickey1 — Tue, 12 Mar 2019 06:35:10 GMT

Hello all,

I was doing some captures on an ingress ASA and an egress ASA during testing at my company and encountered something strange. While we were testing, the captures I had configured (verified as correct by two of my senior engineers) weren't capturing any traffic. Yet, at the same time, a "sh conn | i x.x.x.x" showed the established TCP connection. The captures ended up showing packets from the test a whole 2 hours after they were configured, without us changing anything in the configuration. Would there be any reason for ASA packet captures to delay logging packets in the buffers?

Thank you in advance for any answers.

Hi,I am not sure if that is

Vibhor Amrodia — Sat, 12 Sep 2015 18:51:42 GMT

Hi,

I am not sure if that is even possible. Did you see some data being transferred for the connections and did you have the correct address information ?

I think try to check with some other traffic and if you are able to recreate this issue ?

Thanks and Regards,

Vibhor Amrodia

topic Hi,I am not sure if that is in Network Security

ASA Delayed Packet Capture logs

Hi,I am not sure if that is