ASA 5500 - 8.32 - Capture showing duplicate packets

[Paul Cummings]

Hi,

I am troubleshooting various connectivity issues at the moment and I am unsure whether the following is an indication of an issue or just a "feature" of the current ASA capture on 8.3.

I am capturing traffic on the outside interface of one of our firewalls (raw-data) and I am seeing packets duplicated in the capture (pre and post NAT).

Is this just the capture picking up the same packet at two different stages of processing?

The NAT rule is a twice NAT.

FYI the type of traffic being captured is IAX2 (udp)

Thanks

Paul

[fadlouni]

Hi.

Let's say from experience with troubleshooting firewalls for a long time i haven't seen this specific issues. i've seen capture bugs where some particular packets Don't show up, but haven't seen situations where the packet shows twice.

can you show your interface configuration and the show capture X output?

Regards,

Fadi.