sniffer-redirect

Captures and redirects packets to an IP address running a packet capture/analysis tool

Supported in the following platforms:

Access Points — AP5010, AP310i/e, AP410i/e, AP460i/e, AP505i, AP510i/e, AP560i/h, AP7522, AP7532, AP7562, AP7612, AP7632, AP7662, AP8432, AP8533

Syntax

sniffer-redirect [omnipeek|tzsp] <IP> channel [1|10|100|100w --------] 
{snap <1-65535> (append descriptor)}

Parameters

sniffer-redirect [omnipeek|tzsp] <IP> channel [1|10|100|100w ---------] 
{snap <1-65535> (append descriptor)}


sniffer-redirect	Captures and redirects packets to an IP address running a packet capture/analysis tool
omnipeek	Encapsulates captured packets in proprietary header (used with OmniPeek and plug-in)
tzsp	Encapsulates captured packets in TZSP (used with WireShark and other tools)
<IP>	Specify the IP address of the device running the capture/analysis tool (the host to which captured off channel scan packets are redirected)
[1\|10\|100\|100w ----------]	Specify the channel to capture packets 1 – Channel 1 in 20 MHz mode (default setting) 10 – Channel 10 in 20 MHz mode 100 – Channel 100 in 20 MHz mode 100w – Channels 100w in 40 MHz mode (channels 100*,104)
snap <1-65535>	Optional. Allows truncating of large captured frames at a specified length (in bytes). This option is useful when capturing traffic with large frames. Use this option when only headers are needed for analysis, since it reduces the bandwidth needed for sniffing, and (for typical values) eliminates any fragmentation of the outer packet. <1-65535> – Specify the maximum truncated byte length of captured packets.
append descriptor	Optional – Enables appending of the radio's receive descriptor to the captured packet

Example

nx9500-6C8809(config-profile-510TestProfile-if-radio1)#sniffer-redirect omnipeek 172.16.10.1 channel 1

nx9500-6C8809(config-profile-510TestProfile-if-radio1)#show context
 interface radio1
  rf-mode sensor
  placement outdoor
  mesh client
  rts-threshold 100
  off-channel-scan channel-list 2.4GHz 1
  guard-interval long
  aggregation ampdu tx-only
  rifs tx-only
  sniffer-redirect omnipeek 172.16.10.1 channel 1
  aeroscout forward
  ekahau forward ip 172.16.10.1 port 3
  non-unicast tx-rate bss 1 dynamic-all
  non-unicast tx-rate bss 2 highest-basic
  non-unicast tx-rate bss 3 highest-basic
  non-unicast tx-rate bss 4 highest-basic
  non-unicast tx-rate bss 5 highest-basic
  non-unicast tx-rate bss 6 highest-basic
 --More--
nx9500-6C8809(config-profile-510TestProfile-if-radio1)#

Related Commands


no (radio-interface-config-command)	Disables packet capture and redirection