Password recovery procedures for various Cisco equipment are located here:
http://www.cisco.com/en/US/products/sw/iosswrel/ps1831/products_tech_note09186a00801746e6.shtml
Pix#copy ttpt flash
When asked enter the IP address of your TFTP server. Then enter the filename of the software image. The system willl automatically upgrade the firmware erasing the old firmware and replacing it with the new revision.
Pix#copy ttpt flash:pdm
When asked enter the IP address of your TFTP server. Then enter the filename of the PDM image. The system willl automatically upgrade the PDM file.
Now you can monitor the traffic through the PIX in the syslog server.
If you do not have or do not want to setup the logging server you can use PIX capture feature:
ciscoasa(config)#access-list inside_test permit icmp any host 192.168.1.1 ciscoasa(config)#capture inside_interface access-list inside_test interface inside ciscoasa#show capture inside_interface
More about this is on the Cisco page: http://www.cisco.com/en/US/products/ps6120/products_tech_note09186a00807c35e7.shtml