topic Re: Automatically copy packet capture to flash in Network Security

Automatically copy packet capture to flash

charlie.ford — Mon, 11 Mar 2019 19:26:57 GMT

I need to download a packet capture daily to a server. We will use the "scp" option to retrive the capture but?

Can I automaticlly store a capture in flash? Or can I retrieve it from another memory location via scp?

wget works but I need a secure method of transport, wget exposes the passwords (unless you can secure that also)?

Here is my generic capture:

object-group network pcap_remote

network-object 0 0

object-group network pcap_local

network-object 0 0

access-list acl_capture permit ip object-group pcap_remote object-group pcap_local

access-list acl_capture permit ip object-group pcap_local object-group pcap_remote

capture pcap type raw-data access-list acl_capture buffer 10000 interface outside circular-buffer

show capture pcap

https://10.10.43.240/capture/pcap/pcap

Re: Automatically copy packet capture to flash

mirober2 — Thu, 23 Dec 2010 15:56:26 GMT

Hi Charlie,

You can use the 'copy /pcap capture: flash:' command to copy the contents of the capture buffer to a file in flash, but you would need to use a script to login to the firewall for this to be done manually.From there you can use scp to get the capture off the flash.

Hope that helps.

-Mike

Re: Automatically copy packet capture to flash

charlie.ford — Tue, 28 Dec 2010 13:44:07 GMT

Mirober2,

Not sure if this will get to you but thanks for the response. You saved me a lot of time.