topic Capture Problems on ASA in Network Security https://community.cisco.com/t5/network-security/capture-problems-on-asa/m-p/1255107#M786136 <P>Who knows why the capture command on the asa 8.0 release does capture packets but is not able to display (or export to wireshark) all packets.</P><P>The command I use (in several variations)</P><P>capture cap1 type raw-data buffer 33554432 interface outside circular-buffer headers-only [Capturing - 17124 bytes]</P><P></P><P>the command sh capture cap1</P><P>simply shows several lines (from some thousands)</P><P></P><P>Wireshark displays "The capture file appears to have been cut short in the middle of a packet"</P><P></P><P></P> Mon, 11 Mar 2019 16:36:08 GMT kerstin-534 2019-03-11T16:36:08Z Capture Problems on ASA https://community.cisco.com/t5/network-security/capture-problems-on-asa/m-p/1255107#M786136 <P>Who knows why the capture command on the asa 8.0 release does capture packets but is not able to display (or export to wireshark) all packets.</P><P>The command I use (in several variations)</P><P>capture cap1 type raw-data buffer 33554432 interface outside circular-buffer headers-only [Capturing - 17124 bytes]</P><P></P><P>the command sh capture cap1</P><P>simply shows several lines (from some thousands)</P><P></P><P>Wireshark displays "The capture file appears to have been cut short in the middle of a packet"</P><P></P><P></P> Mon, 11 Mar 2019 16:36:08 GMT https://community.cisco.com/t5/network-security/capture-problems-on-asa/m-p/1255107#M786136 kerstin-534 2019-03-11T16:36:08Z Re: Capture Problems on ASA https://community.cisco.com/t5/network-security/capture-problems-on-asa/m-p/1255108#M786144 <HTML><HEAD></HEAD><BODY><P>Don't use the "headers-only" and then if you save the capture in pcap Wireshark should be able to open it.</P><P></P><P>I hope it helps.</P><P></P><P>PK</P><P></P></BODY></HTML> Wed, 04 Nov 2009 20:03:31 GMT https://community.cisco.com/t5/network-security/capture-problems-on-asa/m-p/1255108#M786144 Panos Kampanakis 2009-11-04T20:03:31Z