Packet capture in AirWave

[jkoelker@orcsd.org]

Is there a way to do a packet capture from a MAS in AirWave? We are running AirWave 8.0.10 on  a VM housed on an ESX server and it's a bit of a problem to use Wireshark since there's no way of knowing at any given moment which physical interface on the ESX AirWave is using (the server has four connected interfaces and runs about two dozen VMs), so I can't tell which one to port mirror to my Wireshark station. Was hoping there was built-in feature in AirWave to do that, but so far haven't found one. There's plenty of info on capturing from APs, but I'm specifically interested in SNMP traffic between the switches and the AirWave application.

[cjoseph]

What are you trying to do?  Capture SNMP traffic from Airwave to the MAS?

[jkoelker@orcsd.org]

Sorry for the brief reply earlier!

We have certain MAS stacks that seem to drop SNMP every day at a specific time of day and for a specific duration - it's been going on for months. Always the same two switch stacks. After the predictable interval, they return to passing SNMP traffic.

I've opened a case with Aruba TAC and they've asked me to get packet captures from our AirWave server, but I can't really see how to do it for the reasons I outlined. Just wondering if there's way so that I can give TAC what they need.

Jon Koelker
IT Support
Oyster River Cooperative School District
jkoelker@orcsd.org
603.389.3301

[cjoseph]

You could use TCPDUMP on Airwave...