ASA live traffic monitoring

[Hamed Karimi]

Hey Guys,

How can I monitor denied traffic real-time?

With "show conn", it just shows the accepted sessions, but I want to know if there is a source IP that sends traffic (even through IPsec tunnel) and get denied.

Packet tracer is not handling live traffic. 

Thanks

[Rob Ingram]

Hi,
You could configure logging and send to a syslog server, alternatively log to buffer/console to view on the ASA. Logging to a syslog does not impact the performance of the ASA, logging local does.

HTH