topic ASA CLI in Network Security

ASA CLI

Bel Marsad — Mon, 11 Mar 2019 20:13:41 GMT

We have some users downloading big files from the net, and I want to find out a CLI to find quickly this user by his ip address on my ASA. I used show conn but its showing me about 15000 connections with Bytes transferred but it take time to find out the user with the biggest download. I know that there is a CLI to use for this purpose. Is there someone that know this command?

Thanks in advance

Re: ASA CLI

PAUL GILBERT ARIAS — Mon, 28 Mar 2011 16:10:29 GMT

normally I use the command "sh conn | i idle 0:00:00". That tells me the active connections and the amount of bytes consumed.

you could also use a netflow analyzer and monitor the hosts.

Re: ASA CLI

Bel Marsad — Tue, 29 Mar 2011 07:22:49 GMT

Thanks for your reply,

But this command doesn’t help to find out quickly the top downloader.

Re: ASA CLI

PAUL GILBERT ARIAS — Tue, 29 Mar 2011 14:26:31 GMT

try a netflow analyzer such a Orion from Solarwinds.