packet-tracer ---------------

ASA# packet-tracer input inside tcp 10.2.25.3 1025 209.165.202.158 80 detailed

The command above will create a virtual TCP packet which will start from the
“inside” interface and have source IP “10.2.25.3” and source port “1025” and
destination IP “209.165.202.158” with destination port “80“.

Live traffic detection with Packet-Capture --------

Configure Packet Capture with the CLI

Configure the inside and outside interfaces as illustrated in the network diagram,
with the correct IP address and security levels.

ASA# capture capin interface inside match ip 192.168.10.10 255.255.255.255

203.0.113.3 255.255.255.255

ASA# capture capout interface outside match ip 192.168.10.10 255.255.255.255

203.0.113.3 255.255.255.255

to stop the capture at anytime, enter the no capture command followed by the
capture name.

no capture capin interface inside

no capture capout interface outside