Wireless Access

last person joined: yesterday 

Access network design for branch, remote, outdoor, and campus locations with HPE Aruba Networking access points and mobility controllers.
Back to discussions
Expand all | Collapse all

Packet capture on Aruba controller and AP

This thread has been viewed 14 times

  • 1.  Packet capture on Aruba controller and AP

    Posted Oct 30, 2012 05:43 PM

    Hi guys,

     

    Is it true that

    1. AP can only capture client traffic if the SSID is open without encryption?

    2. Controller only capture traffic to and from itself, not client traffic?

     

    My controller run ArubaOS 3.4.4.2. Will a upgrade give it more features?

     

    Thanks,



  • 2.  RE: Packet capture on Aruba controller and AP

    EMPLOYEE
    Posted Oct 30, 2012 11:09 PM
    @difan.zhao wrote:

    Hi guys,

     

    Is it true that

    1. AP can only capture client traffic if the SSID is open without encryption?

    2. Controller only capture traffic to and from itself, not client traffic?

     

    My controller run ArubaOS 3.4.4.2. Will a upgrade give it more features?

     

    Thanks,



     

    1.  Not True

    2.  Not True

     

    Please see the document here:  http://community.arubanetworks.com/aruba/attachments/aruba/115/160/1/Packet+Capturing+Options+with+Aruba+Wireless+Networks.pdf to see the ways you can do packet captures.

     

    Nothing has been added since that version of code, in terms of packet capturing.

     

     



  • 3.  RE: Packet capture on Aruba controller and AP

    Posted Oct 31, 2012 02:33 PM

    Thank you

    I just figure out that the AP actually captures the traffic but it is encrypted... I have figured out how to decrypt it with wireshark.

    Do you also have a document about capturing the traffic on the controller?

    Thanks,



  • 4.  RE: Packet capture on Aruba controller and AP

    EMPLOYEE
    Posted Oct 31, 2012 02:34 PM

    The same document link above shows how to capture within the controller.



  • 5.  RE: Packet capture on Aruba controller and AP

    Posted Oct 31, 2012 03:42 PM

    Thanks Joseph. Sorry I missed that part...

     

    I am still playing with the AP capture. It successfully captured and decrpyted the packets. However on my wireshark it shows that packets captured as [Packet size limited during capture: IEEE 802.11 truncated].

     

    Does the AP only captures the first 100bytes, not the entire packet if it is larger than 100bytes? Is there a way to increase it?

     

    Thanks,