Cleaning out files from ASA flash

[DEENA VERAPPAN]

HI All,

Looking for some help/advice on cleaning out files in flash. Over time we have an accumulation of files that have been written to flash. I would like to remove the unnecessary/no longer needed files. Some of the files are easily identifiable, by extension *.cap *.cfg etc. However some files don't have an extension and I'm not sure if others are referenced any where else in the configuration. I've provided a table below of what I've identified as to be deleted and what should be kept. But I'm not sure about the rest of the files. Any ideas?

--#--	Size	Date & Time	File name	Description	Action
19	59	May 12 2017 17:26:58	coredumpinfo/coredump.cfg	configuration file	delete
17	89	Oct 31 2020 00:29:32	dap.xml
220	1138	May 12 2017 17:26:58	upgrade_startup_errors_201705130026.log
219	3000	May 12 2017 17:26:58	8_2_5_0_startup_cfg.sav
266	9937	Dec 06 2019 23:28:38	log/asa-appagent.log
269	20022	Jan 28 2021 00:29:25	dhcp_cap_2	capture file	delete
18	32768	May 12 2017 16:33:14	coredumpinfo
208	32768	Dec 31 1979 16:00:00	FSCK0000.REC	File System Check	delete
4	32768	Jun 24 2017 02:28:16	log
16	32768	Jul 18 2016 19:18:38	crypto_archive
210	32768	Oct 31 2020 00:29:29	tmp
211	32768	Dec 31 1979 16:00:00	FSCK0001.REC	File System Check	delete
213	32768	Jul 18 2016 19:18:48	sdesktop	Cisco Secure Desktop	delete
215	32768	Dec 31 1979 16:00:00	FSCK0002.REC	File System Check	delete
216	32768	Dec 31 1979 16:00:00	FSCK0003.REC	File System Check	delete
217	32768	Dec 31 1979 16:00:00	FSCK0004.REC	File System Check	delete
270	60828	Jan 28 2021 02:58:11	king.pcap	capture file	delete
228	62204	May 20 2020 13:56:10	ExemptVPNUser
268	67986	Jan 28 2021 00:29:06	dhcp_cap	capture file	delete
231	72641	Sep 14 2020 13:57:10	capin	capture file	delete
229	523857	Jun 05 2020 11:35:56	capin.pcap	capture file	delete
230	524209	Jun 05 2020 11:36:40	capout.pcap	capture file	delete
245	706313	Mar 30 2019 23:44:42	crashinfo_20190330_234357_UTC
242	721536	Mar 25 2019 00:06:50	crashinfo_20190325_000607_UTC
244	750108	Mar 30 2019 23:29:36	crashinfo_20190330_232840_UTC
223	803302	Jun 13 2017 10:40:58	oldconfig_2017Jun13_1740.cfg	configuration file	delete
224	803302	Jun 14 2017 13:43:06	oldconfig_2017Jun14_2042.cfg	configuration file	delete
225	803302	Jun 14 2017 13:44:18	oldconfig_2017Jun14_2044.cfg	configuration file	delete
235	806404	Aug 18 2017 13:08:04	oldconfig_2017Aug18_2007.cfg	configuration file	delete
236	806404	Aug 18 2017 13:40:38	oldconfig_2017Aug18_2040.cfg	configuration file	delete
238	848607	Jul 07 2018 00:00:24	run-backup-20180707
239	878012	Jan 18 2019 22:34:56	20190118.run
246	888001	Mar 31 2019 00:00:40	startup-config-20190330
243	888011	Mar 30 2019 23:21:30	asa-running-20190330.cfg	configuration file	delete
206	905038	Sep 13 2019 23:07:02	Config_Sept13
27	974856	Apr 12 2021 15:06:20	COVASA-CleanConfigImport4
207	1474495	May 07 2020 14:53:10	vpnusers
240	1523333	Jan 29 2019 13:02:58	pcap_cap_egress	capture file	delete
212	12998641	Jul 18 2016 19:18:46	csd_3.5.2008-k9.pkg
234	26730224	Jun 20 2017 13:25:58	asdm-771-151.bin	old asdm image	delete
232	29999715	Sep 14 2020 13:57:30	asp
227	33696792	May 07 2020 21:06:08	asdm-7122.bin	Current ASDM Image	Keep
248	41488685	Jul 31 2019 11:35:40	asasfr-boot-6.1.0-330.img
283	80078630	Mar 05 2021 22:00:03	anyconnect-win-4.9.06037-webdeploy-k9.pkg	Current Anyconnect Version	Keep
218	82796544	Nov 29 2019 09:49:32	asa964-36-smp-k8.bin	Old IOS	delete
205	83017728	Aug 07 2019 12:47:44	asa964-30-smp-k8.bin	Old IOS	delete
247	83017728	May 08 2019 22:14:24	asa964-25-smp-k8.bin	Old IOS	delete
241	83036160	Mar 08 2019 16:19:42	asa964-23-smp-k8.bin	Old IOS	delete
214	102813696	Oct 30 2020 22:35:40	asa9-12-4-7-smp-k8.bin	Current IOS	Keep
226	103071744	May 07 2020 21:05:26	asa9-12-3-12-smp-k8.bin	Old IOS	delete

[Rob Ingram]

@DEENA VERAPPAN 

Of the files you've not identified, a couple of these are obviously crashinfo files, these can be deleted.

There appear to be quite a few files with random names, I would guess these are backup configuration files without an extension. I would copy these off the ASA and open in notepad to confirm before deleting from the ASA.

You have a dap.xml file, do you use DAP in your configuration? If yes, then leave this file.

Leave system files/folders log, tmp etc

If you are concerned, you could copy these files off the ASA before deleting. Allowing you to restore if needs be.

[johnlloyd_13]

hi,

you can remove the .pcap files as i suspect these packet capture files were used during troubleshooting.

you can also remove the old ASDM and IOS/image files. just keep the current and a backup version prior to the current one.