Tutorial by: alagoutte
When there is same problem with Wireless Network, it is sometime needed to have same pcap trace for troubleshooting !
With new 802.11ac standard, there is no yet airpcap available for make pcap trace !
But with Aruba IAP, it is possible to use IAP for remote pcap ! with Wireshark (it is also possible with Aruba Controller !)
You need :
Connect to the IAP with SSH :
It is the same login and password like web administration page
Search the BSSID for access point using show ap monitor status command.
in WLAN Interface, there is the list of BSSID (one for 80211b/g and one for 80211/a/n/ac)
In my example, the BSSID is 24:de:c6:8b:12:20
Now use pcap command !
There is multiple argument in command
pcap start BSSID @IPofcomputer UDPPort format size
About format, actually airmagnet format is not yet support by Wireshark, it is recommended to use pcap for simple remote, if you need radio info use PPI or pcap radio format
The packet capture is start with id 5
Now launch Wireshark and go to the preference
Search Aruba ERM preferences
Set the UDP port configured in IAP (5555) and select also the format of captured packets (in my example,pcap (type 0))
and launch capture on your computer
You should be received all traffic from your network card, it is possible to filter the IAP traffic with following display fitler : udp.port==5555
You can now troubleshooting your wireless network
To display the list of pcap remote, you can use the following command :
show pcap status
for stop the capture, in SSH terminal, use the command :
pcap stop BSSID ID
Replace BSSID by the BSSID of IAP and ID by the id number of pcap capture (use show pcap status to found this number)
© Copyright 2023 Hewlett Packard Enterprise Development LPAll Rights Reserved.