Hi Imran,
The Capture cannot be sent in the form of syslogs to the syslog server. However, you can extract the current capture from/to the syslog server in the following ways:
1. in the browser, type in https:///capture//pcap
You should have "http server enable" and allow access from syslog server "http 255.255.255.255 " on the ASA, before you can do this.
2. In the ASA command line, enter the command "copy /pcap capture: tftp" and fill in the prompts that follow. You should have a TFTP service running on the syslog server, in order to export the capture to the syslog server.
Once you get the file from either of the 2 ways, you can use something like wireshark to analyze the data.
I don't think there is a real time way to continuously export the capture onto the server.
Hope this helps.
-Shrikant
P.S.: Please mark the question as answered, if it has been resolved. Do rate helpful posts. Thanks.
