Wireshark capture interface1/12/2023 ![]() ![]() There are 3 basic steps involve in capturing process.ġ. There are two active clients connected to this AP while taking the packet capture. So we will capture the packets going in/out form this interface. I have one AP connected to my 3850 & it uses “Ca0” interface to terminate CAPWAP tunnel on to it. Here how you can get a packet capture from it. * To capture a CAPWAP non-data tunnel, the switch is set to capture traffic on all ports and apply an appropriate ACL to filter the traffic. * To capture a CAPWAP data tunnel, each CAPWAP tunnel is mapped to a physical port and an appropriate ACL will be applied to filter the traffic. * Core filters are not applied and should be omitted when capturing a CAPWAP tunnel. * Capturing multiple CAPWAP tunnels is supported. * When capturing CAPWAP tunnels, no other interface types can be used as attachment points on the same capture point. * The only form of wireless capture is a CAPWAP tunnel capture. ![]() Here is few things to remember when taking wireless packet captures You should have IOS-XE 3.3.0 or later images to have this feature. ![]() This switch model comes with embeded wireshark feature. In new 3850 switch model, you can take packet captures within switch itself (no longer required to port span by connecting a pc which is running wireshark). ![]()
0 Comments
Leave a Reply.AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |