Preview Tool

Cisco Bug: CSCup16888 - ASA ingress interface capture should happen before any processing

Last Modified

Apr 19, 2020

Products (1)

  • Cisco ASA 5500-X Series Firewalls

Known Affected Releases


Description (partial)

Currently ASA interface traffic capture for ingress packets happens after IP Sanity Check, so malformed IP packets can be seen in ASP-drops, but not in interface captures. It would be better from troubleshooting prospective if interface capture for ingress traffic happens earlier, so we can capture all incoming packets.

no special conditions
Bug details contain sensitive information and therefore require a account to be viewed.

Bug Details Include

  • Full Description (including symptoms, conditions and workarounds)
  • Status
  • Severity
  • Known Fixed Releases
  • Related Community Discussions
  • Number of Related Support Cases
Bug information is viewable for customers and partners who have a service contract. Registered users can view up to 200 bugs per month without a service contract.