show log does not show traffic

[mahesh18]

Hi everyone,

I was troubleshooting the issue where wheni do show log I was unable to see the source and destination ip.

When I enable packet capture on ASA I was able to see it.

Is there any reason show log does not show traffic?

Regards

Mahesh

[Aditya Ganjoo]

Hi Mahesh,

You should be able to see the traffic in the logs.

Could you try using ASDM real time log viewer and set the logging to debugging, filter it on the basis of the IP and then check.

Regards,

Aditya

Please rate helpful posts and mark correct answers.

[mahesh18]

will try that next week regards

Mahesh

[mahesh18]

show logs shows this only

 second, max configured rate is 5; Cumulative total count is 779
Jun 30 2016 04:16:00: %ASA-4-733100: [ Scanning] drop rate-1 exceeded. Current bur                                                                                      st rate is 12 per second, max configured rate is 10; Current average rate is 1 per                                                                                       second, max configured rate is 5; Cumulative total count is 777
Jul 01 2016 04:03:09: %ASA-4-733100: [ Scanning] drop rate-1 exceeded. Current bur                                                                                      st rate is 12 per second, max configured rate is 10; Current average rate is 0 per                                                                                       second, max configured rate is 5; Cumulative total count is 260
Jul 01 2016 04:07:41: %ASA-4-733100: [ Scanning] drop rate-1 exceeded. Current bur                                                                                      st rate is 12 per second, max configured rate is 10; Current average rate is 0 per                                                                                       second, max configured rate is 5; Cumulative total count is 518
Jul 01 2016 04:11:53: %ASA-4-733100: [ Scanning] drop rate-1 exceeded. Current bur                                                                                      st rate is 12 per second, max configured rate is 10; Current average rate is 1 per                                                                                       second, max configured rate is 5; Cumulative total count is 774
Jul 01 2016 04:16:14: %ASA-4-733100: [ Scanning] drop rate-1 exceeded. Current bur                                                                                      st rate is 12 per second, max configured rate is 10; Current average rate is 1 per                                                                                       second, max configured rate is 5; Cumulative total count is 776

[Aditya Ganjoo]

Hi Mahesh,

Share the output of show run logging.

Regards,

Aditya

Please rate helpful posts and mark correct answers.

[mahesh18]

Here is output

     show run logging
logging enable
logging timestamp
logging console critical
logging buffered warnings
logging trap informational
logging asdm informational
logging facility 23

Regards

Mahesh

[Simrid123 · Accepted solution]

This looks to be an issue with your configuration, if you set the logging level on the buffer to "informational" you should start to see the traffic in the logs.  Please see the below article for further information on the logging levels.

http://www.cisco.com/c/en/us/td/docs/security/asa/asa82/configuration/guide/config/monitor_syslog.html

[mahesh18]

Many thanks Simrid