3com WX1200 3CRWX120695A Manuel D’Utilisation

Remotely Monitoring Traffic

643

Enabling or Disabling

a Snoop Filter

A snoop filter does not take effect until you enable it. To enable or disable
a snoop filter, use the following command:

set snoop {filter-name | all}
mode {enable | disable}

The filter operates until you manually disable it.

The filter mode is retained even if you disable and reenable the radio, or
restart the MAP or the WX switch. Once the filter is enabled, you must
use the disable option to disable it.

The following command enables snoop filter snoop1:

WX# set snoop snoop1 mode enable
success: filter 'snoop1' enabled

Displaying Remote

Traffic Monitoring

Statistics

The MAP collects statistics for packets that match the enabled snoop
filters mapped to its radios. The MAP retains statistics for a snoop filter
until the filter is changed or disabled. The MAP then clears the statistics.

To display statistics for packets matching a snoop filter, use the following
command:

display snoop stats [filter-name [apnumber [radio {1 | 2}]]]

The following command shows statistics for snoop filter snoop1:

WX# display snoop stats snoop1
Filter Ap Radio Rx Match Tx Match Dropped
============================================================
snoop1

3 1

96 4

Preparing an

Observer and

Capturing Traffic

To observe monitored traffic, install the following applications on the
observer:

Ethereal or Tethereal Version 0.10.8 or later

Netcat (any version), if not already installed

Ethereal and Tethereal decode 802.11 packets embedded in TZSP without
any configuration.