topic Re: Cisco Wireless Controller 2125 in Wireless

Cisco Wireless Controller 2125

x96harig12 — Sun, 04 Jul 2021 02:17:25 GMT

Cisco wireless controller is sending out malform packets across the network. Wireshark reports numerous malform packets with the source of the Wireless Controller. when we unplug the WC the malformed packets go away and our network returns to total normal. We do have the lastest firmware on it. We do have multicast on, because we use a program called synchroneyes at the school. We have about 20 AP's on it.

Thanks

Marty

Re: Cisco Wireless Controller 2125

x96harig12 — Thu, 14 Oct 2010 23:04:44 GMT

turning of multicast, or enabling IGMP Snooping reduces the malformed packets.

Re: Cisco Wireless Controller 2125

Nicolas Darchis — Fri, 15 Oct 2010 06:44:36 GMT

Hi Martin,

never blindly trust Wireshark about malformed packets, it may simply be that it's not decoding it properly.

For example, if you don't turn lwapp/capwap decryption on, Wireshark thinks that all lwapp/capwap traffic contain malformed wireless probe requests.

So I'd suggest you look more closely at the packet and check what is malformed about it. If it's correct up to the lwapp/capwap payload, then you shouldn't worry.

Make sure you have the latest wireshark version and in "Edit->preferences" turn on capwap/lwapp decryption

Nicolas