Capture function in FWSM

[trond.fleitscher]

Hi all,

I am trying to use the capture function in my FWSM on my cat6509.

The function is configured to capture on a certain interface on my firewall context, but I can't seem to capture any traffic (!).

Trying to fix this problem I upgraded to software version 3.2.17 with no luck.

Could you advice please.

Regards,

Trond

[Giuseppe Larosa · Accepted solution]

Hello Trond,

the FWSM config guide lists some limitations to packet capture feature check if you are hitting one of them:

http://www.cisco.com/en/US/docs/security/fwsm/fwsm32/configuration/guide/troubl_f.html#wp1067860

you can use only an IPv4 ACL and you can only capture IP packets (no ARP or other non IP frames)

Hope to help

Giuseppe

[trond.fleitscher]

Hi all,

Thanks for your reply.

It seems that the capture functioned after some time. And I learned that it is mandatory to apply an acl to the capture for it to function correctly

[Ganesh Hariharan]

Hi all,
I am trying to use the capture function in my FWSM on my cat6509.
The
function is configured to capture on a certain interface on my firewall
context, but I can't seem to capture any traffic (!).
Trying to fix this problem I upgraded to software version 3.2.17 with no luck.
Could you advice please.
Regards,
Trond

Hi Trond,

Check out the below link for capturing packet in FWSM,Hope to Help !!

http://www.cisco.com/en/US/docs/security/fwsm/fwsm32/configuration/guide/troubl_f.html#wp1068063

Ganesh.H