Using A Browser To Display Capture Data - Cisco PIX 500 Series Configuration Manual

Chapter 37 Configuring Clientless SSL VPN
The following example creates a capture named hr, which captures traffic for user2 to a file:
hostname# capture hr type webvpn user user2
WebVPN capture started.
capture name
user name
hostname# no capture hr

Using a Browser to Display Capture Data

Perform the following steps to capture data about a clientless SSL VPN session and view it in a browser.
To start the capture utility for clientless SSL VPN, use the capture command from privileged EXEC
Step 1
mode.
capture capture_name type webvpn user webvpn_username
where:
•
•
The capture utility starts.
Step 2 A user logs in to begin a clientless SSL VPN session. The capture utility is capturing packets.
Stop the capture by using the no version of the command.
Open a browser and in the address box enter
Step 3
https://asdm_enabled_interface_of_the_security_appliance:port/admin/capture/capture_name/pcap
The following example command displays the capture named hr:
https://192.0.2.1:60000/admin/capture/hr/pcap
The captured content displays in a sniffer format.
Step 4 When you finish examining the capture content, stop the capture by using the no version of the
command.
OL-12172-03
hr
user2
capture_name is a name you assign to the capture, which is also prepended to the name of the
capture files.
webvpn_user is the username to match for capture.
Cisco Security Appliance Command Line Configuration Guide
Capturing Data
37-79