cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
16451
Views
21
Helpful
2
Replies

How to export capture from Cisco ASA in multi-context

srijan
Level 1
Level 1

We have a Cisco ASA 5585-x in multi-context mode in our environment. I did a packet capture in one of the contexts and analysed the same on CLI. However, I would like to export it and view the same on Wireshark but my attempts were not successful. I did check the command reference document and also searched online, but looks like I am missing out something. 

Some of the errors I encountered:

%Error parsing filename (No such device)

ERROR: Invalid capture specification

ERROR: context <> does not exist

I believe I am committing syntax error but not able to understand the mistake. Also, do I need to execute the copy command from inside the context or from the system mode.?

Name of the context: CTXT1

Name of the capture: mycap

Commands that I tried:

copy capture:CTXT1\mycap tftp://10.20.30.40/var/mycap.pcap

copy capture:CTXT1\mycap tftp://username:mypwd@10.20.30.40/var/mycap.pcap

copy /pcap capture:CTXT1\mycap tftp://10.20.30.40/var/mycap.pcap

copy /pcap capture:CTXT1\mycap tftp://username:mypwd@10.20.30.40/var/mycap.pcap

When I look into the disk0: in system mode, I see the context name as DCFW01-CTXT1.cfg. But when I enter show context, it displays the context name as CTXT1. Please let me know which of the two must be used in the copy command. 

Kind Regards,

Srikanth

1 Accepted Solution

Accepted Solutions

GRANT3779
Spotlight
Spotlight

I have always done this from system context -

copy /pcap capture:CTXT1/mycap tftp://10.20.30.40/mycap.pcap

to rule out a typo use

copy /pcap capture:CTXT1/mycap tftp

then follow prompts

View solution in original post

2 Replies 2

GRANT3779
Spotlight
Spotlight

I have always done this from system context -

copy /pcap capture:CTXT1/mycap tftp://10.20.30.40/mycap.pcap

to rule out a typo use

copy /pcap capture:CTXT1/mycap tftp

then follow prompts

Thank you very much. It worked. I followed the second command and followed the prompts. 

Review Cisco Networking products for a $25 gift card