how to see asa vpn S2S traffic?

[baselzind]

i have a asa 5515 v 9.1 , i have a S2S vpn IKEv1 and IKEv2 which i need to check packets going through it and what packets getting dropped through it , how can i do that? i cant seem to get anything through asdm real-time log viewer?

[Rob Ingram]

Hi,

From the CLI use the command "show crypto ipsec sa" and confirm the encaps and decaps counters are increasing to confirm traffic is being sent/received over the VPN tunnel successfully. You can also use packet capture to confirm traffic is sent/received.

Do you have an ACL or VPN Filter that could be blocking traffic over the tunnel? If so enable logging and view the output

HTH

[baselzind]

no i want to see the actual incoming and outgoing packets and the ports not just the counters , i tried real time logging but it wont show the vpn traffic

[Rob Ingram]

Ok, do you have logging enabled? Post your configuration.

[gerald.scott]

Check this out.

https://community.cisco.com/t5/firewalls/packet-captures-vpn-traffic-on-asa/td-p/3083656