Monitor / Trace VPN to VPN Tunnel traffic

[dukeminus]

I have a two ASA 5520's  and I want to be able to see or monitor the traffic between each tunnel. I am using external addresses but for the sake of this question I will use the following: 1.1.1.1  to 2.2.2.2 .   How can I montior the traffic?   Thanks in advance for your cooperation.

you can email me @   jgreene@eagleinvsys.com

[Parminder Sian]

Hi,

When you say that you want to monitor the traffic, does that mean that how much traffic was encrypted, if yes, then try the commands:-

sh crypto isakmp sa and sh crypto ipsec sa

if this is not what you are looking for then please elaborate.

Sian

[dukeminus]

I need to make sure the tunnel is up and running properly. I want to see if the two tunnels are talking with each other.

[Pavel Pokorny]

Hi,

What's the plan of monitoring?

SNMP?

If yes, there is problem, because OIDs of tunnels are changing everytime, tunnel is established.

I also solve this problem, but haven't found any free tool.

If you're prepared to pay, then this one seems to look fine : http://www.vpnttg.com/

HTH