topic Re: trying to debug an ACL on PIX in Network Security https://community.cisco.com/t5/network-security/trying-to-debug-an-acl-on-pix/m-p/184439#M612561 <HTML><HEAD></HEAD><BODY><P>Debugging on the PIX will certainly give you a ton of information. With the PIX you can either use the "capture" command to capture all traffic based on an ACL (which can then even be saved off in Sniffer format, very useful), or in 6.3 code you can add a log keyword to the end of the access-list command.</P><P></P><P>See <A class="jive-link-custom" href="http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_sw/v_63/cmdref/ab.htm#1067755" target="_blank">http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_sw/v_63/cmdref/ab.htm#1067755</A> for details, the default logging level of ACL lines is informational, so if you do "logging monitor info" then you should see these and not get all the other stuff you get at debug level.</P></BODY></HTML> Tue, 26 Aug 2003 02:32:09 GMT gfullage 2003-08-26T02:32:09Z trying to debug an ACL on PIX https://community.cisco.com/t5/network-security/trying-to-debug-an-acl-on-pix/m-p/184438#M612559 <P>I would like to setup an ACL then use a "debug packet" type command to observe certain traffic on my PIX 515e. I have used this technique many times with IOS routers but the PIX just doesn't behave the same way. As soon as I give the "logging monitor debug" I am swamped with all sorts of info concerning other operations of the PIX like denied inbound packets, NAT events, TCP connections established and so on. How can I get the PIX to show me ONLY the traffic defined by my ACL and NOTHING else?</P><P></P><P>Thanks,</P><P>Diego</P><P></P> Fri, 21 Feb 2020 06:57:07 GMT https://community.cisco.com/t5/network-security/trying-to-debug-an-acl-on-pix/m-p/184438#M612559 tato386 2020-02-21T06:57:07Z Re: trying to debug an ACL on PIX https://community.cisco.com/t5/network-security/trying-to-debug-an-acl-on-pix/m-p/184439#M612561 <HTML><HEAD></HEAD><BODY><P>Debugging on the PIX will certainly give you a ton of information. With the PIX you can either use the "capture" command to capture all traffic based on an ACL (which can then even be saved off in Sniffer format, very useful), or in 6.3 code you can add a log keyword to the end of the access-list command.</P><P></P><P>See <A class="jive-link-custom" href="http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_sw/v_63/cmdref/ab.htm#1067755" target="_blank">http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_sw/v_63/cmdref/ab.htm#1067755</A> for details, the default logging level of ACL lines is informational, so if you do "logging monitor info" then you should see these and not get all the other stuff you get at debug level.</P></BODY></HTML> Tue, 26 Aug 2003 02:32:09 GMT https://community.cisco.com/t5/network-security/trying-to-debug-an-acl-on-pix/m-p/184439#M612561 gfullage 2003-08-26T02:32:09Z