topic WLC remote capturing (SNIFF MODE) in Wireless

WLC remote capturing (SNIFF MODE)

Johannes Luther — Sun, 04 Jul 2021 00:07:53 GMT

Hi Board,

There's the sniffing option in the APs modes. After enabling it, rebooting the AP and adjusting the sniffed channel and destination, the controller sends packets to UDP/5000 with the destination address of the configured destination.

So far so good.

What capturing tool is used to decode the UDP packets as 802.11 packets. I guess, that the UDP payload is the original 802.11 packet.

So has anyone done something like that before? The documentation is very poor on that topic.

Oh - I'm using some 4.2 Version 🙂

Thanks in advance! Wbr

Joe

Re: WLC remote capturing (SNIFF MODE)

Fri, 13 Feb 2009 15:06:22 GMT

The controller enables you to configure an access point as a network "sniffer," which captures and forwards all the packets on a particular channel to a remote machine that runs packet analyzer software. These packets contain information on timestamp, signal strength, packet size, and so on. Sniffers allow you to monitor and record network activity and to detect problems.

Configuring Wireless Sniffing:

http://www.cisco.com/en/US/docs/wireless/controller/5.2/configuration/guide/c52err.html#wp1042843

Re: WLC remote capturing (SNIFF MODE)

Johannes Luther — Fri, 13 Feb 2009 15:44:05 GMT

Thanks, but how to configure wireless sniffing is crystal clear. That wasn't my question after all. How do I enable Wireshark to capture/interprete that traffic. And I doesn't talk about capturing UDP Packets from the controller with the 802.11 packet as UDP-payload.