12-23-2010 06:36 AM - edited 03-11-2019 12:26 PM
I need to download a packet capture daily to a server. We will use the "scp" option to retrive the capture but?
Can I automaticlly store a capture in flash? Or can I retrieve it from another memory location via scp?
wget works but I need a secure method of transport, wget exposes the passwords (unless you can secure that also)?
Here is my generic capture:
object-group network pcap_remote
network-object 0 0
object-group network pcap_local
network-object 0 0
access-list acl_capture permit ip object-group pcap_remote object-group pcap_local
access-list acl_capture permit ip object-group pcap_local object-group pcap_remote
capture pcap type raw-data access-list acl_capture buffer 10000 interface outside circular-buffer
show capture pcap
12-23-2010 07:56 AM
Hi Charlie,
You can use the 'copy /pcap capture: flash:' command to copy the contents of the capture buffer to a file in flash, but you would need to use a script to login to the firewall for this to be done manually.From there you can use scp to get the capture off the flash.
Hope that helps.
-Mike
12-28-2010 05:44 AM
Mirober2,
Not sure if this will get to you but thanks for the response. You saved me a lot of time.
CF
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide