logs on cisco asa

[carl_townshend]

hi all, can anyone tell me how to view the realtime logs on the cisco asa using the command prompt rather than the gui ?

[adamclarkuk_2]

show log

sh processes memory

sh cpu usage

show memory

show xlate (for NAT)

[carl_townshend]

hi there, if I do a show log, would this be the same as the logging on the gui? can you see the logs by doing a term mon and debugging ?

[adamclarkuk_2]

It all depends on what you want carl ?

[carl_townshend]

I want to see the logs of all the things going through my firewall like I do on the gui under the logging section, on the gui I see a live list that moves, can this happen on the cli ?

[adamclarkuk_2]

Then the commands above will help

show xlate will show the translations, show con will show the connections

show log will show what has been built connection wise.

Try the commands and let me know if it's not what you want.

[carl_townshend]

how about the show local-hosts command? is this the same as show conn ?

[carl_townshend]

Hi, By default, does it show all things passing through the device on the gui? or do i need to configure the access list with the log command ?

[Zeeshan Siddiqui]

Hi Carl,

I believe you want to see all traffic leaving an interface / all traffic between two hosts as you can on ASDM.

You can do that by setting up a capture on CLI

• cap capin int inside match ip host 192.168.1.11 host 192.168.1.10
  
• sh cap capin - to display packets
• clear cap capin - to collect fresh packets
• no cap capin - to remove

This can geerate alot of traffic be specific what you want to see in the capture you can also do using an ACL

https://supportforums.cisco.com/docs/DOC-17814

Kind Regards,

Zeeshan Siddiqui