topic ASA Packet Capture in Network Security

ASA Packet Capture

jonk34567 — Mon, 30 Dec 2019 14:41:41 GMT

In packet capture options when i mention the source or source and destination , packet capture buffer only displays the ingress interface traffic and it does not show any Egress interface traffic. Below i have attached the screenshot. what could be the reason for this ?

Re: ASA Packet Capture

georgehewittuk1 — Mon, 30 Dec 2019 15:28:57 GMT

Does the route to the destination actually go out of interface wan1. (Check routing table)

Seems maybe like a misconfiguration of the wizard can you share the configuration of the egress capture?

Re: ASA Packet Capture

jonk34567 — Mon, 30 Dec 2019 16:56:33 GMT

yes it goes via Wan1.

Re: ASA Packet Capture

georgehewittuk1 — Tue, 31 Dec 2019 09:07:41 GMT

Hello,

In that case as you are seeing traffic return successfully likely to be a capture issue/configuration issue. I would try from the CLI and capture on the egress i.e. the wan2 so...

cap cap1 interface wan2 match ip host x host y

You can do a show capture cap1 detail should see results.