cancel
Showing results for 
Search instead for 
Did you mean: 
cancel

802.11 Wireless Sniffing (Packet Capture)

44653
Views
10
Helpful
5
Comments

This article has been superseded by

Fundamentals of 802.11 Wireless Sniffing

 

 

Introduction

 

 

In order to understand how and why 802.11 (WiFi) devices behave as they do, it is invaluable to perform a wireless packet capture ("sniffer".)  This can be especially important when working with Cisco TAC to resolve a technical problem.  The following articles will help you to choose and use a wireless sniffer.

 

 

Additionally, there are several commercially available wireless sniffer products:

 

  • OmniPeek from WildPackets
  • AirMagnet WiFi Analyzer from Fluke
  • CommView for WiFi from TamoSoft
  • AirPcap from Riverbed (formerly CACE)

 

When providing Cisco TAC with wireless packet captures, please supply them in a format that is readable by current Wireshark, and that includes 802.11 meta data (RSSI, channel, data rate) - such as OmniPeek (Airopeek) or Netmon 2.0 format.

Comments
Cisco Employee

great document thanks a lot Aaron

Super útil. Gran aporte.

Cisco Employee

Hello Aaron,

Just wanted to share this post with you:

https://supportforums.cisco.com/blog/12200881/using-live-linux-distro-get-wireless-packet-capture

Cisco Employee
Hi Aaron, Great page, thanks! It seems that with the new communities format, all the referenced links redirect to a "Page not found" error page. Would you be able to fix that? Regards, Federico
Cisco Employee

This document has been superseded by the following CCO article:

https://www.cisco.com/c/en/us/support/docs/wireless-mobility/80211/200527-Fundamentals-of-802-11-Wireless-Sniffing.html

 

I'll update this document to point to the new one once I can figure out how to edit it ...

 

Aaron

 

CreatePlease to create content
Content for Community-Ad
August's Community Spotlight Awards