210 ServerIron ADX Security Guide
53-1002440-03
Displaying socket information
6
asm dm ssldump both
Use the asm dm ssldump both command on the BP to display both client and server SSL packets.
ServerIronADX# rconsole 1 1
ServerIronADX1/1# asm dm ssldump both
Debug both client and server packets
Syntax: asm dm ssldump both
asm dm ssldump client
Use the asm dm ssldump client command on the BP to display client SSL packets only.
ServerIronADX# rconsole 1 1
ServerIronADX1/1# asm dm ssldump client
Debug client packets only
Syntax: asm dm ssldump client
asm dm ssldump filter
Use the asm dm ssldump filter command on the BP to set up SSL packet filters.
Use the asm dm ssldump filter command with the following options to display SSL packets with
matching destination IP addresses.
ServerIronADX# rconsole 1 1
ServerIronADX1/1# asm dm ssldump filter 1 dpa <ip_addr>
Syntax: asm dm ssldump filter <num> dpa <ip_addr>
Use the asm dm ssldump filter command with the following options to display SSL packets with
matching source IP addresses.
ServerIronADX# rconsole 1 1
ServerIronADX1/1# asm dm ssldump filter 1 spa 1<ip_addr>
Syntax: asm dm ssldump filter <num> spa <ip_addr>
Use the asm dm ssldump filter command with the following options to display SSL packets with
matching destination ports, use the following syntax:
ServerIronADX# rconsole 1 1
ServerIronADX1/1#asm dm ssldump filter 1 dport 80
Syntax: asm dm ssldump filter <num> dport <num>
Use the asm dm ssldump filter command with the following options to display SSL packets with
matching source ports, use the following syntax:
ServerIronADX# asm dm ssldump filter 1 sport 80
Syntax: asm dm ssldump filter <num> sport <num>
asm dm ssldump mode brief
Use the asm dm ssldump mode brief command on the BP to display SSL packet summary
information.