07-01-2016 07:59 AM - edited 03-12-2019 12:58 AM
Hi everyone,
I was troubleshooting the issue where wheni do show log I was unable to see the source and destination ip.
When I enable packet capture on ASA I was able to see it.
Is there any reason show log does not show traffic?
Regards
Mahesh
Solved! Go to Solution.
07-04-2016 09:48 AM
This looks to be an issue with your configuration, if you set the logging level on the buffer to "informational" you should start to see the traffic in the logs. Please see the below article for further information on the logging levels.
http://www.cisco.com/c/en/us/td/docs/security/asa/asa82/configuration/guide/config/monitor_syslog.html
07-01-2016 05:27 PM
Hi Mahesh,
You should be able to see the traffic in the logs.
Could you try using ASDM real time log viewer and set the logging to debugging, filter it on the basis of the IP and then check.
Regards,
Aditya
Please rate helpful posts and mark correct answers.
07-01-2016 05:42 PM
will try that next week regards
Mahesh
07-01-2016 05:48 PM
show logs shows this only
second, max configured rate is 5; Cumulative total count is 779
Jun 30 2016 04:16:00: %ASA-4-733100: [ Scanning] drop rate-1 exceeded. Current bur st rate is 12 per second, max configured rate is 10; Current average rate is 1 per second, max configured rate is 5; Cumulative total count is 777
Jul 01 2016 04:03:09: %ASA-4-733100: [ Scanning] drop rate-1 exceeded. Current bur st rate is 12 per second, max configured rate is 10; Current average rate is 0 per second, max configured rate is 5; Cumulative total count is 260
Jul 01 2016 04:07:41: %ASA-4-733100: [ Scanning] drop rate-1 exceeded. Current bur st rate is 12 per second, max configured rate is 10; Current average rate is 0 per second, max configured rate is 5; Cumulative total count is 518
Jul 01 2016 04:11:53: %ASA-4-733100: [ Scanning] drop rate-1 exceeded. Current bur st rate is 12 per second, max configured rate is 10; Current average rate is 1 per second, max configured rate is 5; Cumulative total count is 774
Jul 01 2016 04:16:14: %ASA-4-733100: [ Scanning] drop rate-1 exceeded. Current bur st rate is 12 per second, max configured rate is 10; Current average rate is 1 per second, max configured rate is 5; Cumulative total count is 776
07-01-2016 05:52 PM
Hi Mahesh,
Share the output of show run logging.
Regards,
Aditya
Please rate helpful posts and mark correct answers.
07-01-2016 05:56 PM
Here is output
show run logging
logging enable
logging timestamp
logging console critical
logging buffered warnings
logging trap informational
logging asdm informational
logging facility 23
Regards
Mahesh
07-04-2016 09:48 AM
This looks to be an issue with your configuration, if you set the logging level on the buffer to "informational" you should start to see the traffic in the logs. Please see the below article for further information on the logging levels.
http://www.cisco.com/c/en/us/td/docs/security/asa/asa82/configuration/guide/config/monitor_syslog.html
07-18-2016 07:46 AM
Many thanks Simrid
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide