topic Re: trace traffic through asa in Network Security

trace traffic through asa

tolinrome tolinrome — Tue, 12 Mar 2019 03:42:28 GMT

How can I trace an http request through the asa from the point of user initiantion to external site and back to the user? I need to be able to see why there are conection problems and if I can see the route and whats going on in the packet maybe that can help.

Thanks.

trace traffic through asa

Marius Gunnerud — Fri, 07 Feb 2014 20:28:10 GMT

do you mean you want to see the actions taken on a packet through the ASA, or you want to allow traceroute through the ASA?

If you mean the latter then you can use packet tracer, just change the IP addresses to the required values:

packet-tracer input inside tcp 192.168.1.10 12345 4.2.2.2 80 detail

Another option is to do a packet capture, this capture can be viewed in Wireshark for analysis.

You can set this up using either the ASDM or the CLI. The following link has a guide as to how to configure packet capture using both.

http://www.cisco.com/en/US/products/ps6120/products_tech_note09186a0080a9edd6.shtml

--
Please remember to rate and select a correct answer

Re: trace traffic through asa

Vasilii Mikhailovskii — Sun, 09 Feb 2014 07:29:26 GMT

Hello.

You could start traffic capture with additional keyword "trace".

After you will be able to see how every packet was examined and if it was dropped and why.

PS: after you captured traffic, use command "sh capture packet-number <1...x> trace