Cisco ASA Series Cli Configuration Manual page 1228

Troubleshooting the Phone Proxy
Table 1-5 Security Appliance Capture Commands to Use with the Phone Proxy
To
To capture packets on the ASA interfaces. capture capture_name interface
To capture data from the TLS proxy when
there is a non-secure IP phone connecting
to the phone proxy on the inside interface.
To capture encrypted data from the TLS
proxy when there are secure IP phones
connecting to the phone proxy on the
inside interface.
To capture encrypted inbound and
outbound data from the TLS proxy on one
or more interfaces.
Cisco ASA Series CLI Configuration Guide
1-30
Use the Command
interface_name
capture capture_name packet-length
bytes interface inside buffer buf_size
capture capture_name type tls-proxy
buffer buf_size packet-length bytes
interface inside
capture capture_name type tls-proxy
buffer buf_size packet-length bytes
interface interface_name
Chapter 1 Configuring the Cisco Phone Proxy
Notes
Use this command if you are
experiencing any problems that might
require looking into the packets.
For example, if there is a TFTP failure
and the output from the debug command
does not indicate the problem clearly, run
the capture command on the interface on
which the IP phone resides and the
interface on which the TFTP server
resides to see the transaction and where
the problem could be.
If signaling fails, you might require
capturing decrypted packets to see the
contents of the SIP and SCCP signaling
message. Use the type tls-proxy option
in the capture command.