topic Re: Read IPS IP Log file in Network Security https://community.cisco.com/t5/network-security/read-ips-ip-log-file/m-p/1149108#M77573 <HTML><HEAD></HEAD><BODY><P>While I don't specifically remember "time based" capture, I have performed captures based on a source or destination IP address on the AIP-SSM modules. They are saved on the module in pcap format. This is a standard packet capture format used by any packet sniffer, such as Wireshark (free) <A class="jive-link-custom" href="http://www.wireshark.org/" target="_blank">http://www.wireshark.org/</A></P><P>Download the pcap and open with Wireshark. Make sure you try out the "follow TCP stream" option in Wireshark, it's great for following a single session.</P></BODY></HTML> Thu, 05 Mar 2009 16:28:07 GMT rhermes 2009-03-05T16:28:07Z Read IPS IP Log file https://community.cisco.com/t5/network-security/read-ips-ip-log-file/m-p/1149107#M77562 <P>Hello, I have a IPS-SSM-20 (6.2.1) and I'm using IME 6.2 to manage it. On IME-&gt; Configuration-&gt;Time Based-&gt; IP Logging is possible to capture a particular IP traffic and download the file. Does someone know, once downloaded, how to read it ?</P> Sun, 10 Mar 2019 11:32:16 GMT https://community.cisco.com/t5/network-security/read-ips-ip-log-file/m-p/1149107#M77562 helenio 2019-03-10T11:32:16Z Re: Read IPS IP Log file https://community.cisco.com/t5/network-security/read-ips-ip-log-file/m-p/1149108#M77573 <HTML><HEAD></HEAD><BODY><P>While I don't specifically remember "time based" capture, I have performed captures based on a source or destination IP address on the AIP-SSM modules. They are saved on the module in pcap format. This is a standard packet capture format used by any packet sniffer, such as Wireshark (free) <A class="jive-link-custom" href="http://www.wireshark.org/" target="_blank">http://www.wireshark.org/</A></P><P>Download the pcap and open with Wireshark. Make sure you try out the "follow TCP stream" option in Wireshark, it's great for following a single session.</P></BODY></HTML> Thu, 05 Mar 2009 16:28:07 GMT https://community.cisco.com/t5/network-security/read-ips-ip-log-file/m-p/1149108#M77573 rhermes 2009-03-05T16:28:07Z