Polling / Debugging / Showing RSSI values for Probe Requests for Unconnected Mobile Stations

[shamax_1983]

Hi Guys,

I've been researching on this for last two days and still can't find a specific way to do this..

I'm trying to get  information (MAC & RSSI) on the prob-requests from all mobile clients heard from an Access Point directly. That is, Without getting WLC and/or WSE and/or LBS involved)

I understand that this information can be easily accessible from the WLC itself (from GUI or by polling the WLC using SNMP OIDs from AIRSPACE-WIRELESS-MIB).  But this MIB is not compatible with the AP's IOS. So no luck there..

I found an MIB (CISCO-DOT11-ASSOCIATION-MIB) that works on the AP and would give me information only on the connected/associated clients but NOT on the probing-unconnected clients.

The closest I have gotten so far is the following debug command on the AP,

   debug dot11 rxprobe
   dot11 RX Probe debugging is on

   023937: Oct 29 11:47:02 ACDT: ToCtrl: 00016F, 001, -11b, ffff.ffff.ffff, 1234.abcd.1234 SSID: NULL
   023938: Oct 29 11:47:02 ACDT: ToCtrl: 000171, 001, -11b, ffff.ffff.ffff, 1234.abcd.1234 SSID: someSSID

Which, as you can see, outputs the MAC address of the probing station. But I'm not quite sure what the other values represent. Can someone please point out the real meaning of the other information presented in this output (is RSSI hidden somewhere there :)).

Also, Is there any other way of getting this information out ? ( again without using the WLC or WSE or LBS)

When AP is linked up with an WLC, the AP pushes this information to the WLC via the CAPWAP tunnel. So definitely this information is in there (may be not stored in the AP). I just can't find a way to tap this information.

Any information surrounding this will be much appreciated.

Why I want this?: I'm working on a project that needs this functionality.

Thanks 

[afaganga1]

The same command on a 1130 outputs:

*Mar  1 03:58:00.684: ToLwapp:      000769, 001, -11b, ffff.ffff.ffff, 0024.2c22.6812 SSID: NULL
*Mar  1 03:58:00.685: ToLwapp:      00076A, 001, -11b, ffff.ffff.ffff, 0024.2c22.6812 SSID: eduroam
*Mar  1 03:58:00.685: ToLwapp:      00076B, 001, -11b, ffff.ffff.ffff, 0024.2c22.6812 SSID: Vodafone-42F541
*Mar  1 03:58:00.727: ToLwapp:      000794, 001, -11b, ffff.ffff.ffff, 0024.2c22.6812 SSID: eduroam
*Mar  1 03:58:01.454: ToLwapp:      00026B, 001, -11b, ffff.ffff.ffff, 1c4b.d68c.d7de SSID: eduroam
*Mar  1 03:58:01.474: ToLwapp:      00027F, 001, -11b, ffff.ffff.ffff, 1c4b.d68c.d7de SSID: eduroam
*Mar  1 03:58:01.967: ToLwapp:      00046D, 001, -11b, ffff.ffff.ffff, 0024.2c22.6812 SSID: NULL
*Mar  1 03:58:01.968: ToLwapp:      00046D, 001, -11b, ffff.ffff.ffff, 0024.2c22.6812 SSID: eduroam
*Mar  1 03:58:01.969: ToLwapp:      00046E, 001, -11b, ffff.ffff.ffff, 0024.2c22.6812 SSID: Vodafone-42F541
*Mar  1 03:58:06.723: ToLwapp:      000701, 001, -11b, ffff.ffff.ffff, 0024.2c22.6812 SSID: NULL
*Mar  1 03:58:06.724: ToLwapp:      000701, 001, -11b, ffff.ffff.ffff, 0024.2c22.6812 SSID: eduroam
*Mar  1 03:58:06.725: ToLwapp:      000702, 001, -11b, ffff.ffff.ffff, 0024.2c22.6812 SSID: Vodafone-42F541
*Mar  1 03:58:06.771: ToLwapp:      000730, 001, -11b, ffff.ffff.ffff, 0024.2c22.6812 SSID: NULL
*Mar  1 03:58:06.771: ToLwapp:      000730, 001, -11b, ffff.ffff.ffff, 0024.2c22.6812 SSID: eduroam
*Mar  1 03:58:06.772: ToLwapp:      000731, 001, -11b, ffff.ffff.ffff, 0024.2c22.6812 SSID: Vodafone-42F541
*Mar  1 03:58:07.616: ToLwapp:      00027D, 001, -11b, ffff.ffff.ffff, 9cb7.0d6c.9b38 SSID: eduroam
*Mar  1 03:58:07.647: ToLwapp:      00029D, 001, -11b, ffff.ffff.ffff, 9cb7.0d6c.9b38 SSID: eduroam
*Mar  1 03:58:07.986: ToLwapp:      0003EF, 001, -11b, ffff.ffff.ffff, 0024.2c22.6812 SSID: NULL
*Mar  1 03:58:07.987: ToLwapp:      0003F0, 001, -11b, ffff.ffff.ffff, 0024.2c22.6812 SSID: eduroam
*Mar  1 03:58:07.988: ToLwapp:      0003F1, 001, -11b, ffff.ffff.ffff, 0024.2c22.6812 SSID: Vodafone-42F541