Cisco Asa Capture for troubleshooting

The following example shows the use of the 'match' argument with packet captures:

ciscoasa# capture in interface inside buffer 1000000

ciscoasa# capture in match ip any host 192.168.1.25

ciscoasa#

ciscoasa# capture out interface outside buffer 1000000

ciscoasa# capture out match ip any host

ciscoasa#

ciscoasa# show capture capture in type raw-data buffer 1000000

interface inside buffer 1000000 interface inside [Capturing - 586 bytes]

match ip any host 192.85.1.3

capture out type raw-data buffer 1000000 interface GAT_outside [Capturing - 300 bytes]

match ip any host 192.85.1.3

ciscoasa/FW#

ciscoasa/FW# show cap in

3 packets captured

1: 12:04:06.482625 192.85.1.3 > 192.168.1.25: icmp: echo request

2: 12:04:06.482915 192.168.1.25 > 192.85.1.3: icmp: echo reply

3: 12:04:07.478216 192.85.1.3 > 192.168.1.25: icmp: echo request

ciscoasa/FW#

Installing/Upgrading Cisco IPS License

Installing/Upgrading Your Cisco Signature Subscription Service License File

To install the license using the IPS sensor Command Line Interface (CLI), follow these steps:

1.  Save the license file to a system that has a web server, FTP server, or SCP server.

2.  Log in to the sensor as a user with Administrator privileges.

3.  Use one of the following copy commands to transfer the license file to the sensor:

a.  SSH: copy scp:// license-key

b.  FTP: copy ftp:// license-key

c.  HTTP: copy http:// license-key

d.  HTTPS: copy https:// license-key

4.  Type the show version command to verify the sensor is licensed.

To install the license using IPS Device Manager (IDM), follow these steps:

1.  Save the license file to a hard-disk drive or a network drive that is accessible by the client running IDM.

2.  Log in to the IDM.

3.  Click Configuration > Licensing.

4.  Under Update License, select Update From: License File.

5.  In the Local File Path field, specify the path to the license file.

6.  Click Update License.