Cisco WAP571, Administration Manual

Page: 55 / 192

Administration
Packet Capture
Cisco WAP571/E Administration Guide 55
3
• Local capture method — Captured packets are stored in a file on the WAP
device. The WAP device can transfer the file to a TFTP server or download
by HTTP(S) to a computer. The file is formatted in pcap format and can be
examined using tools such as Wireshark and OmniPeek.
• Remote capture method —Captured packets are redirected in real time to
an external computer running the Wireshark tool.
The WAP device can capture these types of packets:
• 802.11 packets received and transmitted on radio interfaces. Packets
captured on radio interfaces include the 802.11 header.
• 802.3 packets received and transmitted on the Ethernet interface.
• 802.3 packets received and transmitted on the internal logical interfaces
such as VAPs and WDS interfaces.
Select Administration > Packet Capture to display the Packet Capture page.
From the Packet Capture page you can:
• Configure packet capture parameters.
• Start a local or remote packet capture.
• View the current packet capture status.
• Download a packet capture file.
The Packet Capture Configuration area enables you to configure parameters and
initiate a packet capture.
To configure packet capture settings:
STEP 1
Configure these parameters:
• Capture Beacons —Enables or disables the capturing of 802.11 beacons
detected or transmitted by the radio.
• Promiscuous Capture —Enables or disables promiscuous mode when the
capture is active.
In promiscuous mode, the radio receives all traffic on the channel, including
traffic that is not destined to this WAP device. While the radio is operating in
promiscuous mode, it continues serving associated clients. Packets not
destined to the WAP device are not forwarded.