What servers are still using the l2l tunnel?

[richard@skylo.net]

I have several l2l tunnels we are moving and decommissioning. I see a few tunnels with very little traffic, but traffic nonetheless based on RX and TX counts, and I need to see who exactly and what servers are still using the tunnel, and which ports.

How can I see what servers are still using the s2s VPN tunnel and what ports?

I have a cisco ASA FPR2120.

Thank you.

[MHM Cisco World]

Try use vpn filter 

Then use 

Show asp table filter 

This will give you IP try to use vpn l2l

https://www.cisco.com/c/en/us/support/docs/security/pix-500-series-security-appliances/99103-pix-asa-vpn-filter.html

MHM

[M02@rt37]

Hello richard@skylo.net 

To identify which servers are using your Site-2-Site VPN tunnels on your ASA and what ports they are using, you can use the show conn detail command to view active connections and filter by relevant IPs, show vpn-sessiondb l2l to see active L2L VPN sessions, and enable detailed logging with logging buffer informational to capture traffic details.

For more granular analysis, you can set up a packet capture on the ASA to monitor specific traffic through the VPN and analyze the captured data using show capture, or export it for deeper inspection. 

[ccieexpert]

logging just for the connection entries (not everything) and you can also use netflow to log the flow