AP mode sniffer

[s.hellman]

Has anyone used 'AP mode sniffer´?

The documentation says that it is used together with Airopeek, but that is a legacy product and cant be downloaded

[Rasika Nayanajith · Accepted solution]

Hi,

Yes, I have used it sniffer mode many times. I used OmniPeek as protocol analyzer.

Here are how you use it with a AireOS and IOS based controller

1. http://mrncciew.com/2014/09/22/802-11ac-wireless-packet-captures/

2. http://mrncciew.com/2014/10/05/802-11ac-with-3850-3702/

Pls do not forget to rate our responses if that is helpful.

HTH

Rasika

[s.hellman]

Great 'How To', I will try this. Thanks

[pieterh]

Cisco describes use of multiple packet capture tools like  section 2) Sniffer side: Wireshark

basically, the WLC forwards captured packets to a specified unicast address /poort.

you can use this port to filter those packets from other trraffic to your workstation.

From here you can use any packet analyzer.

This analyzer needs to decode the wireless packets correctly, for this it needs a suitable decoder/dissector

Each sniffer tool has built-in decoders and may be able to load plug-ins to decode.