Wireless Access

Reply
New Contributor

Packet capture on Aruba controller and AP

Hi guys,

 

Is it true that

1. AP can only capture client traffic if the SSID is open without encryption?

2. Controller only capture traffic to and from itself, not client traffic?

 

My controller run ArubaOS 3.4.4.2. Will a upgrade give it more features?

 

Thanks,

Guru Elite

Re: Packet capture on Aruba controller and AP


difan.zhao wrote:

Hi guys,

 

Is it true that

1. AP can only capture client traffic if the SSID is open without encryption?

2. Controller only capture traffic to and from itself, not client traffic?

 

My controller run ArubaOS 3.4.4.2. Will a upgrade give it more features?

 

Thanks,




 

1.  Not True

2.  Not True

 

Please see the document here:  http://community.arubanetworks.com/aruba/attachments/aruba/115/160/1/Packet+Capturing+Options+with+Aruba+Wireless+Networks.pdf to see the ways you can do packet captures.

 

Nothing has been added since that version of code, in terms of packet capturing.

 

 



Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

New Contributor

Re: Packet capture on Aruba controller and AP

Thank you

I just figure out that the AP actually captures the traffic but it is encrypted... I have figured out how to decrypt it with wireshark.

Do you also have a document about capturing the traffic on the controller?

Thanks,

Guru Elite

Re: Packet capture on Aruba controller and AP

The same document link above shows how to capture within the controller.



Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

New Contributor

Re: Packet capture on Aruba controller and AP

Thanks Joseph. Sorry I missed that part...

 

I am still playing with the AP capture. It successfully captured and decrpyted the packets. However on my wireshark it shows that packets captured as [Packet size limited during capture: IEEE 802.11 truncated].

 

Does the AP only captures the first 100bytes, not the entire packet if it is larger than 100bytes? Is there a way to increase it?

 

Thanks,

 

Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: