Cisco Cisco WAP351 Wireless-N Dual Radio Access Point with 5-Port Switch 관리 매뉴얼

Packet Capture

Cisco WAP131 and WAP351 Administration Guide

60

If you want to save the settings for use at another time, click Save. However, the 
selection of Remote as the Packet Capture Method is not saved.

Click Start Capture.

To initiate the Wireshark network analyzer tool for Microsoft Windows:

On the same computer, initiate the Wireshark tool.

In the menu, click Capture > Options. A popup window appears.

In the Interface field, select Remote. A popup window appears.

In the Host field, enter the IP address of the WAP device.

In the Port field, enter the port number of the WAP device. For example, enter 
2002 if you used the default, or enter the port number if you used a port other than 
the default.

Click OK.

Select the interface from which you need to capture the packets. At the Wireshark 
popup window, next to the IP address, there is a drop-down menu to select the 
interfaces. The interface can be one of the following:

Linux bridge interface in the wap device 
--rpcap://[192.168.1.220]:2002/brtrunk 
Wired LAN interface
-- rpcap://[192.168.1.220]:2002/eth0
VAP0 traffic on radio 1 
-- rpcap://[192.168.1.220]:2002/wlan0
802.11 traffic
-- rpcap://[192.168.1.220]:2002/radio1
At WAP351, VAP1 ~ VAP7 traffic
-- rpcap://[ 192.168.1.220]:2002/wlan0vap1 ~ wlan0vap7
At WAP131, VAP1 ~ VAP3 traffic
-- rpcap://[ 192.168.1.220]:2002/wlan0vap1 ~ wlan0vap3 

You can trace up to four interfaces on the WAP device at the same time. However, 
you must start a separate Wireshark session for each interface. To initiate 
additional remote capture sessions, repeat the Wireshark configuration steps. No 
configuration needs to be done on the WAP device.

The system uses four consecutive port numbers, starting with the configured port 
for the remote packet capture sessions. Verify that you have four consecutive port 
numbers available. We recommend that if you do not use the default port, use a port 
number greater than 1024.