Ruckus Wireless ZoneDirector 3000, Руководство пользователя, Страница: 405 / 430

Packet Capture and Analysis
Local Capture
ZoneDirector 9.8 User Guide, 800-70599-001 Rev B
405
cleared and begins filling. Due to memory limitations, the capture files are cleared
after they are retrieved by the Save command and before each new capture session,
and they are not retained on the AP between reboots.
In streaming capture mode, packet data from the 2.4 GHz and 5 GHz radios are
available simultaneously on AP interfaces wlan100 and wlan101, respectively. The
streams can be accessed using Wireshark’s remote interface capture option. The
Windows version of Wireshark (e.g., v1.2.10) supports this option. Linux versions
may not.
Both output modes support packet filtering. In local capture mode, the AP accepts
a packet filter expression and applies it before storing the file. In streaming mode,
Wireshark accepts a capture filter expression and sends it to a daemon running on
the AP, which applies it before streaming. Both modes allow compound filter
expressions conforming to the pcap-filter syntax, which is described at
http://
www.manpagez.com/man/7/pcap-filter/ .
Local Capture
To capture packets to a local file for external analysis:
1 Choose 2.4 GHz or 5 GHz radio (you can only capture packets on one radio at
a time).
2 Select one or more APs from the list and click Add to Capture APs . The APs
you selected are moved from the Currently Managed APs table on the left side
to the new Capture APs table on the right.
3 Select Local Mode to save the packet capture to a local file.
4 Click Start to begin capturing packets. Click Stop to end the capture, and click
Save to save the packet capture to a local file.
5 Extract the pcap file(s) from the pcap.zip file and open in Wireshark or other
packet analyzer.
Streaming Mode
To view streaming packets in real time using Wireshark’s remote capture:
1 Choose 2.4 GHz or 5 GHz radio.
2 Select the AP you want to view and click Add to Capture APs .
3 Select Streaming Mode and click Start .
4 Launch Wireshark.
5 Go to Capture Options.