Cap traffic using cisco asa5510/pix

[donnie]

Hi all,

Is it possible to cap specific traffic eg ftp following through the asa5510 or pix firewall?

Pls advise, thks in advance.

[Jennifer Halim]

You can create access-list that match on the FTP traffic, by default FTP control is on TCP/21 and FTP data depending on whether it is passive or active FTP, it will use/negotiate either TCP/20 or random ports.

I would suggest that you just configure ACL that match the source and destination ip address and apply that to your capture command.

[hobbe]

Hi

CAP = Capture ?

CAP = Bandwith management ?

Either way both are possible.

Capture

http://www.cisco.com/en/US/products/ps6120/products_tech_note09186a0080a9edd6.shtml

Bandwith management

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_tech_note09186a008084de0c.shtml

Good luck

HTH

[Panos Kampanakis]

To add to Jennifer's suggestion, here is an example of how to police traffic you want  http://supportforums.cisco.com/docs/DOC-1230#Traffic_Policing_with_Prioritization

I hope it helps.

PK