Print this pagePrint this page

Email this topicEmail this topic

View PDFView PDF

Download EPUBDownload EPUB

Packet Capture Parameters

Field Name Field Description
In the Capture Locations pane, configure the following settings:
Wired Enables wired-packet capture on the selected AP.

Filter packets on the basis of the direction of packet flow:

  • In — Capture packets received by the AP.
  • Out — Capture packets transmitted by the AP.
  • Both — Capture packets transmitted and received by the AP. This is the default value.

Select Includes Wired Clients to include wired-packets received and transmitted to and from wired clients associated with the selected AP. This option is disabled by default.
Wireless Enables wireless-packet capture on the selected AP.

Filter packets on the basis of the direction of packet flow:

  • In — Capture packets received by the AP.
  • Out — Capture packets transmitted by the AP.
  • Both — Capture packets transmitted and received by the AP. This is the default value.
Specify the radio interface on which to enable wireless-packet capture.
  • Radio 1 — Enable packet capture on the AP's radio 1 interface.
  • Radio 2 — Enable packet capture on the AP's radio 2 interface.
  • Radio Both — Enable packet capture on both radio 1 and radio 2 interfaces of the AP. This option is selected by default.
Note: You have the option to capture wired and wireless packets simultaneously. The result is two PCAP files: one displays wired packet information, one displays wireless packet information.
In the Settings pane, specify how you want to determine the length of the packet capture. Options are: Maximum Packet Count, Duration, or manually end packet capture by clicking Stop.
Maximum Packet Count Specify the maximum number of packets captured and logged to the PACP file. The default value is 50000. Packet capture stops once the threshold specified here is reached, unless manually stopped.
Note: The default maximum packet capture data limit is 1 GB. Therefore, regardless of the Maximum Packet Capture Count specified, packet capture stops once the PCAP file size reaches 1 GB.
Duration Packet transfer window. Default value is 5 minutes.
In the Filter pane, filter packets by MAC address, IP address, IP Protocol, or Port. The filters are mutually exclusive and are applied in the order in which they are listed. Enter at least on MAC address or IP address.
Note: Excessive packet capture degrades network performance. If you are going to enable packet capture on all APs, specify at least one MAC address filter and one IP address filter to avoid performance degradation.
Filter by MAC 1 and Filter by MAC 2 Specify one or two MAC addresses to filter packets for capture. When a MAC address is specified, only packets that move to and from the specified MAC addresses are captured.
Filter by IP 1 to Filter by IP 4 Specify one to four IP addresses to filter packets for capture. filters. When an IP address is specified, only packets that move to and from the specified IP addresses are captured. Both IPv4 and IPv6 address formats are supported.
IP Protocol Specify the protocol to filter for packet capture. Packets matching the specified protocol are captured. Valid values are:
  • ICMP — Captures only ICMP packets. This is the default value.
  • TCP — Captures only TCP packets.
  • UDP — Captures only UDP packets
  • GRE — Captures only GRE packets
  • IPsec - ESP — Captures only IPsec - ESP packets
  • IPsec - AH — Captures only IPsec - AH packets
Port Specify a TCP or UDP port number. Packets with the matching port number are captured. Use Port as an additional filter, or if you wish to specify a protocol that is not included in the IP Protocol menu.
Export
Note: You have the option to capture wired and wireless packets simultaneously. The result is two PCAP files: one displays wired packet information, one displays wireless packet information.

Related Topics

Configuring Packet Capture on a Selected AP
Configuring Live Packet Capture
Published April 2018prev | next

Email this topicEmail this topic

Print this pagePrint this page