Hi Sam,
My bad :)
If you need the packet capture for outbound traffic and inbound traffic you need to capture in both the directions:
Ingress capture:
capture capin interface inside match ip host <> host <>
This match statement is bi-directional.
In case there is NAT then you need to make a slight change.
Let's say you have a dynamic NAT for internet access for inside users and traffic is not working:
Something like this:
object-network obj-10.0.0.0
subnet 10.0.0.0 255.255.255.0
nat (inside,outside) dynamic 1.1.1.1
capture cap interface inside match tcp host 10.0.0.1 host 4.2.2.2 eq 80
capture capo interface outside match tcp host 1.1.1.1 host 4.2.2.2 eq 80
This would capture the traffic on both the interfaces and you would know in which direction the traffic is working or not.
Regards,
Aditya
Please rate helpful and mark correct answers
