Comments on: Debug Packet command missing on PIX 7

By: Cisco ASA and 7905 IP Phone Weirdness - [LINICKX].com

Cisco ASA and 7905 IP Phone Weirdness - [LINICKX].com — Tue, 24 Jun 2008 08:30:23 +0000

[...] ran a packet capture and found that the phone was “bouncing” the RTP stream off the firewall rather than [...]

By: [NICK]

[NICK] — Fri, 17 Nov 2006 18:48:47 +0000

I like that you think my posts are odd ! ….. but you’re right they’re supposed to be useful.

Thanks for the tip, tbh most of my troubleshooting can be solved with a “show capture testcap” but it’s nice to know there are alternatives.

By: dragonfrog

dragonfrog — Fri, 17 Nov 2006 18:36:19 +0000

yes, this is adding to a very old post, but I found this useful.

when you’ve got what you want in a capture, you can unbind the capture from the interface without deleting it

# no capture testcap interface inside

You may also be able to get the capture off the box without using ASDM.

# copy /pcap capture:testcap (destination)

The (destination) part is where the documentation and the implemented functionality part ways… Cisco’s docs say you can copy to local flash, or to http, https, ftp, or tftp servers.

When I enter a ? at the destination part, I get offered only the options of local disk, ftp, or tftp. If I tried to copy to local disk, I got told
“ERROR: destination file system is not remote”

I haven’t tested how well it does at putting the capture on a remote server, or if it will actually let you upload it to an http[s] server despite not prompting you with this option…

By: [NICK]

[NICK] — Thu, 09 Feb 2006 10:37:30 +0000

yeah, tiz very cool, especially if you use the capture file with ethereal

By: pyrotech

pyrotech — Wed, 08 Feb 2006 16:11:20 +0000

awesome, it’s almost realtime if you refresh the browser displaying the capture.