配置要抓包的数据流

access-list tac_capture permit ip host 59.42.158.1 host 172.16.99.1

access-list tac_capture permit ip host 172.16.99.1 host 59.42.158.1

capture pix_dmz_capture_1 access-list tac_capture buffer 10000000 interface dmz

capture pix_inside_capture_1 access-list tac_capture buffer 10000000 interface inside

capture tac_dmz_capture intreface dmz

capture tac_inside_capture interface inside

显示一些配置

show clock

show conn local 172.16.99.1

show conn foreign 59.42.158.18

show local-host 172.16.99.1

show local-host 59.42.158.1

show xlate local 172.16.99.1

show xlate global 59.42.158.1

show capture

拷贝capture 到tftp服务器上。

copy capture:pix_dmz_capture_1 tftp://172.16.1.200/pix_dmz_capture.cap pcap

copy capture:pix_inside_capture_1 tftp://172.16.1.200/pix_inside_capture.cap pcap

取消capture

clear capture tac_capture

no capture pix_dmz_capture_1

no capture pix_inside_capture_1

配置要抓包的数据流

access-list tac_capture permit ip host 59.42.158.1 host172.16.99.1

access-list   tac_capture permit ip host 172.16.99.1 host 59.42.158.1

capture asa_capture_inside_1 type raw-data access-list tac_capture buffer 10000000 interface inside

capture asa_capture_outside_1 type raw-data access-list tac_capture buffer 10000000 interface outside

capture tac_capture_inside access-list tac_capture interface inside

capture tac_capture_outside access-list tac_capture interface outside

c)

show clock

show conn address 172.16.99.1

show conn address 59.42.158.1

show local-host 172.16.99.1

show local-host 59.42.158.1

show asp drop

show xlate

show capture

d)拷贝capture到tftp服务器上

copy /pcap capture:asa_capture_inside_1 tftp://172.16.1.201/asa_inside_capture.cap

copy /pcap capture:asa_capture_outside_1 tftp://172.16.1.201/asa_outside_capture.cap

e)取消capture

no capture asa_capture_inside_1

no capture asa_capture_outside_1

clear capture asa_capture_inside_1

clear capture asa_capture_outside_1