trace traffic through asa

[tolinrome tolinrome]

How can I trace an http request through the asa from the point of user initiantion to external site and back to the user? I need to be able to see why there are conection problems and if I can see the route and whats going on in the packet maybe that can help.

Thanks.

[Marius Gunnerud]

do you mean you want to see the actions taken on a packet through the ASA, or you want to allow traceroute through the ASA?

If you mean the latter then you can use packet tracer, just change the IP addresses to the required values:

packet-tracer input inside tcp 192.168.1.10 12345 4.2.2.2 80 detail

Another option is to do a packet capture, this capture can be viewed in Wireshark for analysis.

You can set this up using either the ASDM or the CLI.  The following link has a guide as to how to configure packet capture using both.

http://www.cisco.com/en/US/products/ps6120/products_tech_note09186a0080a9edd6.shtml

--
Please remember to rate and select a correct answer

[Vasilii Mikhailovskii]

Hello.

You could start traffic capture with additional keyword "trace".

After you will be able to see how every packet was examined and if it was dropped and why.

PS: after you captured traffic, use command "sh capture packet-number <1...x> trace