Troubleshoot dropped TCP-443 connections on PIX

[chrisb]

Experiencing intermittent 443 connection issues to ASP.  I am looking for best debugging tips for TCP which output would be directed to syslog server.  Any suggestions?? 

[vilaxmi]

Hello,

SInce your issue is intermittent, I would suggest you to set up capturess (By far the best troubleshooting tool) for interesting traffic and then export the binary captures using ASDM and then analyse them using network analyser like Wireshark (www.wireshark.org)

Here is how you can setup captures :

https://supportforums.cisco.com/docs/DOC-1222

You can get binary captures (PROVIDED you have ASDM access enabled for inside ifc of ASA) :

https:///capture//pcap

Try to use packet length 1522 or above , since in  usual packet captures you can only see first 68 bytes of data i.e. packets get truncated. Here is an example :

capture capout access-list test packet-len 1522 interface outside

Also, you can check service-policy and ASP drops for further troubleshooting.

HTH

Vijaya

[Ganesh Hariharan]

Experiencing
intermittent 443 connection issues to ASP.  I am looking for best
debugging tips for TCP which output would be directed to syslog
server.  Any suggestions??  

Hi,

As per your query you need to capture packets in firewall interface as suggested by Vijaya then only you can identify the exact problem for dropping of TCP port 443 and also just check that TCP port 443 is working properly at the remote host or not.

Check out the below link for captureing the packets

http://www.cisco.com/en/US/products/ps6120/products_tech_note09186a0080a9edd6.shtml

If helpful do rate the valuable post.

Regards

Ganesh.H