topic Re: Capturing Live traffic on PIX in Network Security https://community.cisco.com/t5/network-security/capturing-live-traffic-on-pix/m-p/1102843#M878342 <HTML><HEAD></HEAD><BODY><P>The original poster asked "How to see the live traffic on the PIX interfaces." </P><P></P><P>capture does not have the ability to let users </P><P>look at live traffics. That's my point.</P><P></P><P></P></BODY></HTML> Mon, 05 Jan 2009 14:09:05 GMT cisco24x7 2009-01-05T14:09:05Z Capturing Live traffic on PIX https://community.cisco.com/t5/network-security/capturing-live-traffic-on-pix/m-p/1102838#M878332 <P>How to see the live traffic on the PIX interfaces.whether we have to use tcpdump command as we </P><P>use in Checkpoint or there are other command also to view live traffic.</P><P></P> Mon, 11 Mar 2019 14:30:17 GMT https://community.cisco.com/t5/network-security/capturing-live-traffic-on-pix/m-p/1102838#M878332 palsukh2002 2019-03-11T14:30:17Z Re: Capturing Live traffic on PIX https://community.cisco.com/t5/network-security/capturing-live-traffic-on-pix/m-p/1102839#M878334 <HTML><HEAD></HEAD><BODY><P>Here's a good reference-</P><P></P><P><A class="jive-link-custom" href="http://www.computernetworkinghelp.com/content/view/40/1/" target="_blank">http://www.computernetworkinghelp.com/content/view/40/1/</A></P><P></P><P>Hope that helps.</P></BODY></HTML> Mon, 29 Dec 2008 14:18:47 GMT https://community.cisco.com/t5/network-security/capturing-live-traffic-on-pix/m-p/1102839#M878334 Collin Clark 2008-12-29T14:18:47Z Re: Capturing Live traffic on PIX https://community.cisco.com/t5/network-security/capturing-live-traffic-on-pix/m-p/1102840#M878337 <HTML><HEAD></HEAD><BODY><P>Thanks a Lot</P></BODY></HTML> Mon, 05 Jan 2009 03:21:10 GMT https://community.cisco.com/t5/network-security/capturing-live-traffic-on-pix/m-p/1102840#M878337 palsukh2002 2009-01-05T03:21:10Z Re: Capturing Live traffic on PIX https://community.cisco.com/t5/network-security/capturing-live-traffic-on-pix/m-p/1102841#M878339 <HTML><HEAD></HEAD><BODY><P>Pix "capture" does not show live traffics like</P><P>Checkpoint tcpdump or fw monitor. you have</P><P>to use "show capture xxx" to view traffics.</P><P>By the time you see it, it is not live anymore.</P><P>tcpdump and "fw monitor" show you actual</P><P>live traffics on the interface.</P></BODY></HTML> Mon, 05 Jan 2009 03:44:50 GMT https://community.cisco.com/t5/network-security/capturing-live-traffic-on-pix/m-p/1102841#M878339 cisco24x7 2009-01-05T03:44:50Z Re: Capturing Live traffic on PIX https://community.cisco.com/t5/network-security/capturing-live-traffic-on-pix/m-p/1102842#M878341 <HTML><HEAD></HEAD><BODY><P>A PIX doesn't have tcpdump nor fw monitor. This is a PIX not a Checkpoint.</P></BODY></HTML> Mon, 05 Jan 2009 13:44:05 GMT https://community.cisco.com/t5/network-security/capturing-live-traffic-on-pix/m-p/1102842#M878341 Collin Clark 2009-01-05T13:44:05Z Re: Capturing Live traffic on PIX https://community.cisco.com/t5/network-security/capturing-live-traffic-on-pix/m-p/1102843#M878342 <HTML><HEAD></HEAD><BODY><P>The original poster asked "How to see the live traffic on the PIX interfaces." </P><P></P><P>capture does not have the ability to let users </P><P>look at live traffics. That's my point.</P><P></P><P></P></BODY></HTML> Mon, 05 Jan 2009 14:09:05 GMT https://community.cisco.com/t5/network-security/capturing-live-traffic-on-pix/m-p/1102843#M878342 cisco24x7 2009-01-05T14:09:05Z Re: Capturing Live traffic on PIX https://community.cisco.com/t5/network-security/capturing-live-traffic-on-pix/m-p/1102844#M878345 <HTML><HEAD></HEAD><BODY><P>hello sukh,</P><P></P><P>connect the pix inside interface through a switch, and do port mirroring on the switch to capture all traffic flowing through that pix.. use the SPAN feature of the switch to mirror the port.. as others said, there are no inbuilt command or feature in PIX, to do this functionality...</P><P></P><P>Hope this helps.. all the best..</P><P></P><P>Raj</P></BODY></HTML> Mon, 05 Jan 2009 20:26:28 GMT https://community.cisco.com/t5/network-security/capturing-live-traffic-on-pix/m-p/1102844#M878345 sachinraja 2009-01-05T20:26:28Z Re: Capturing Live traffic on PIX https://community.cisco.com/t5/network-security/capturing-live-traffic-on-pix/m-p/1102845#M878348 <HTML><HEAD></HEAD><BODY><P>A couple of things I do with either PIX or ASA to watch live traffic:</P><P></P><P>1-Syslog, just be sure to have a syslog server (easier to sift through) and log to informational level.</P><P></P><P>2-Can look at output from show conn (not as helpful but you can grep or | inc for specific ip's. This is more of a sanity type of check. </P></BODY></HTML> Mon, 05 Jan 2009 21:30:38 GMT https://community.cisco.com/t5/network-security/capturing-live-traffic-on-pix/m-p/1102845#M878348 sean.lagerholm 2009-01-05T21:30:38Z Re: Capturing Live traffic on PIX https://community.cisco.com/t5/network-security/capturing-live-traffic-on-pix/m-p/1102846#M878350 <HTML><HEAD></HEAD><BODY><P>What version of code are you running? The ASDM is useful unless you are wanting to see more than just syslog type of traffic.</P></BODY></HTML> Tue, 06 Jan 2009 16:42:58 GMT https://community.cisco.com/t5/network-security/capturing-live-traffic-on-pix/m-p/1102846#M878350 h.parsons 2009-01-06T16:42:58Z