Cisco Cisco WAP351 Wireless-N Dual Radio Access Point with 5-Port Switch Maintenance Manual

Packet Capture

Cisco Small Business WAP121 and WAP321 Wireless-N Access Point with PoE

51

As soon as the capture is completed, the radio reverts to nonpromiscuous 
mode operation.

•

Radio Client Filter—Enables or disables the WLAN client filter to capture 
only frames that are transmitted to, or received from, a WLAN client with a 
specified MAC address.

•

Client Filter MAC Address—Specifies the MAC address for WLAN client 
filtering.

The MAC filter is active only when a capture is performed on an 

802.11 interface.

•

Packet Capture Method—Select one of these options:

-

Local File—Captured packets are stored in a file on the WAP device. 

-

Remote—Captured packets are redirected in real time to an external 
computer running the Wireshark tool.

Depending on the selected method, refer to the steps in the Local Packet Capture 
or Remote Packet Capture section to continue.

Changes to packet capture configuration parameters take affect after packet 
capture is restarted. Modifying the parameters while the packet capture is running 
does not affect the current packet capture session. To begin using new parameter 
values, an existing packet capture session must be stopped and restarted.

To initiate a local packet capture:

Ensure that Local File is selected for the Packet Capture Method.

Configure these parameters:

•

Capture Interface—Enter a capture interface type for packet capture:

-

radio1—802.11 traffic on the radio interface.

-

eth0—802.3 traffic on the Ethernet port.

-

VAP0—VAP0 traffic. 

-

VAP1 to VAP15, if configured—Traffic on the specified VAP.