cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1857
Views
0
Helpful
2
Replies

Automatically copy packet capture to flash

charlie.ford
Level 1
Level 1

I need to download a packet capture daily to a server. We will use the "scp" option to retrive the capture but?

Can I automaticlly store a capture in flash? Or can I retrieve it from another memory location via scp?

wget works but I need a secure method of transport, wget exposes the passwords (unless you can secure that also)?

Here is my generic capture:

object-group network pcap_remote

network-object 0 0

object-group network pcap_local

network-object 0 0

access-list acl_capture permit ip object-group pcap_remote object-group pcap_local

access-list acl_capture permit ip object-group pcap_local object-group pcap_remote

capture pcap type raw-data access-list acl_capture buffer 10000 interface outside circular-buffer

show capture pcap

https://10.10.43.240/capture/pcap/pcap

2 Replies 2

mirober2
Cisco Employee
Cisco Employee

Hi Charlie,

You can use the 'copy /pcap capture: flash:' command to copy the contents of the capture buffer to a file in flash, but you would need to use a script to login to the firewall for this to be done manually.From there you can use scp to get the capture off the flash.

Hope that helps.

-Mike

Mirober2,

Not sure if this will get to you but thanks for the response. You saved me a lot of time.

CF

Review Cisco Networking for a $25 gift card