Packet Capture

Use Packet Capture to identify network inconsistencies by intercepting packets from the APs. Packets are captured based on the parameter configurations that you specify.

The Overview dashboard offers a packet capture instances widget that displays instances of packet captures to assist with network troubleshooting.

Capture packets from an individual AP or from a site. To capture packets from an individual AP, go to Monitor > Devices > Access Points. Select an access point, then select Troubleshooting > Packet Capture.

To capture packets associated with a site, go to Monitor > Sites. Select a site, then select Troubleshooting > Packet Capture.

Note

Use at least one IP address or MAC address filter when capturing packets from a site.

The packets are logged in a PCAP file. The PCAP file is temporarily stored on the ExtremeCloud IQ Controller that is associated with the AP or site. To view the PCAP file, export the file to a host running Wireshark.

Note

Live Packet Capture is available in addition to the saved file option. After starting Packet Capture, start Wireshark and add the remote interface using the ExtremeCloud IQ Controller management IP address. See the Wireshark documentation for details.

ExtremeCloud IQ Controller supports up to 10 simultaneous instances of packet capture. The maximum PCAP file size is 1GB, stored locally on appliances E1120, E2120, E2122, E3120, E3125 VE6125, and VE6125K. The virtual appliances CE1000, VE6120, VE6120H, and VE6120K support a 200MB PCAP file. Files can also be stored on a remote SCP server.

Packets can be captured from APs associated with either ExtremeCloud IQ Controller in an availability pair. If the availability connection is disrupted, packet capture stops.

Continuous packet capture is supported. If an AP must restart after a capture has started, the capture will continue after the AP restart. If the appliance must restart, the capture parameters are not preserved.