Enabling Or Disabling A Snoop Filter; Displaying Remote Traffic Monitoring Statistics; Preparing An Observer And Capturing Traffic - Nortel 2360 Configuration Manual

To remove all snoop filter mappings from all radios, use the following command:
clear snoop map all

Enabling or disabling a snoop filter

A snoop filter does not take effect until you enable it. To enable or disable a snoop filter, use the following command:
set snoop {filter-name | all}
mode {enable | disable}
Note.
The filter mode is retained even if you disable and reenable the radio,
or restart the AP or the WSS. Once the filter is enabled, you must use the
disable option to disable it.
The following command enables snoop filter snoop1, and configures the filter to stop after 5000 packets match the filter:
WSS# set snoop snoop1 mode enable stop-after 5000
success: filter 'snoop1' enabled

Displaying remote traffic monitoring statistics

The AP collects statistics for packets that match the enabled snoop filters mapped to its radios. The AP retains statistics
for a snoop filter until the filter is changed or disabled. The AP then clears the statistics.
To display statistics for packets matching a snoop filter, use the following command:
show snoop stats [filter-name [ap-num [radio {1 | 2}]]]
The following command shows statistics for snoop filter snoop1:
WSS# show snoop stats snoop1
Filter ap Radio
====== ===== ====== ======== ========
snoop1 3 1

Preparing an observer and capturing traffic

To observe monitored traffic, install the following applications on the observer:
• Ethereal or Tethereal Version 0.10.8 or later
• Netcat (any version), if not already installed
Ethereal and Tethereal decode 802.11 packets embedded in TZSP without any configuration.
Use Netcat to listen to UDP packets on the TZSP port. This avoids a constant flow of ICMP destination unreachable
messages from the observer back to the radio. You can obtain Netcat through the following link:
http://www.vulnwatch.org/netcat/
Rx Match Tx Match
96 4
Nortel WLAN—Security Switch 2300 Series Configuration Guide
Appendix A:Troubleshooting a WSS 689
Dropped Stop-After
======== ========
0 stopped