cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1722
Views
0
Helpful
2
Replies

PCAP Capture doesn't work

stephan.ochs
Level 3
Level 3

Hi

Yesterday I did a capture on my ASA 8.0(3)12. I can view the internal capture via https://ASA-IP/admin/capture/CapName and https://ASA-IP/capture/CapName.

But if I try to download the PCAP file I get the download dialog and an error "pcap from ASA-IP could not be downloaded". I have packets in my capture so there should be a PCAP file.

Any hints?

Stephan

1 Accepted Solution

Accepted Solutions

scandan
Community Member

Hello stephan,

In order to download .pcap file you can use both CLI and Web Browser.

From CLI just copy the *.pcap file to a TFTP server

ASA#copy /pcap capture:cap_name tftp://tftp_ip_add

From web browser just add "/pcap" comment end of the "https://ip_add/capture/test/pcap" url.

I hope it will work fine.

Serhat

View solution in original post

2 Replies 2

scandan
Community Member

Hello stephan,

In order to download .pcap file you can use both CLI and Web Browser.

From CLI just copy the *.pcap file to a TFTP server

ASA#copy /pcap capture:cap_name tftp://tftp_ip_add

From web browser just add "/pcap" comment end of the "https://ip_add/capture/test/pcap" url.

I hope it will work fine.

Serhat

Hello Serhat

Thanks for your hint.

It seems to be a problem with my browser.

I still can't open /pcap via https.

But I can copy the capture file to tftp server and view it with WireShark.

Stephan