Local Packet Capture - Cisco WAP571 Administration Manual

Administration
Packet Capture
STEP 2
NOTE
STEP 1
STEP 2
Cisco WAP571/E Administration Guide
As soon as the capture is completed, the radio reverts to nonpromiscuous
mode operation.
• Radio Client Filter—Enables or disables the WLAN client filter to capture
only frames that are transmitted to, or received from, a WLAN client with a
specified MAC address.
• Client Filter MAC Address—Specifies the MAC address for WLAN client
filtering.
The MAC filter is active only when a capture is performed on an 802.11
NOTE
interface.
• Packet Capture Method—Select one of these options:
- Local File—Captured packets are stored in a file on the WAP device.
- Remote—Captured packets are redirected in real time to an external
computer running the Wireshark tool.
Depending on the selected method, refer to the steps in the Local Packet Capture
or Remote Packet Capture section to continue.
Changes to packet capture configuration parameters take affect after packet
capture is restarted. Modifying the parameters while the packet capture is running
does not affect the current packet capture session. To begin using new parameter
values, an existing packet capture session must be stopped and restarted.

Local Packet Capture

To initiate a local packet capture:
Ensure that Local File is selected for the Packet Capture Method.
Configure these parameters:
• Capture Interface—Enter a capture interface type for packet capture:
- radio1—802.11 traffic on the radio interface Radio 1.
- radio2—802.11 traffic on Radio 2.
- eth0—802.3 traffic on the Ethernet port.
- wlan0—VAP0 traffic on Radio 1.
3
56