Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

Navigation

Understanding Packet Capture on the AX411 Access Point

This topic includes the following sections:

Packet Capture on the AX411 Access Point

The AX411 Access Point software supports packet capture functionality. The packet capture tool helps you to analyze network traffic and troubleshoot network problems. The packet capture tool captures real-time data packets traveling over the network, for monitoring and logging. Packets are captured as binary data, without modification.

The access point can capture the following types of packets:

  • 802.11 packets received and transmitted on the radio interfaces. The packets captured on radio interfaces include the 802.11 header.
  • 802.3 packets received and transmitted on the Ethernet interface.
  • 802.3 packets received and transmitted on the internal logical interfaces such as virtual access point interfaces.

The AX411 Access Point wireless packet capture tool operates in capture file mode.

Understanding Capture File Mode on the AX411 Access Point

In capture file mode, captured packets are stored in a file on the access point. The access point can transfer the file to a server through HTTPS.

During the capture you can monitor the capture status, elapsed capture time and current capture file size. The information is updated every 10 seconds while the capture is in progress.

You can specify the following parameters while configuring packet capture on the access point:

  • Time—Time duration for the capture. You can specify a duration of 10 to 3600 seconds.
  • Maximum file size—The maximum file size of the capture buffer. You can set the file size from 64 to 4096 KB.
  • Interface—Interface on which to capture the packets. The interface is selected by specifying an interface name, such as Radio1 or Radio1VAP1.

Table 1 provides information on the AX411 Access Point configuration parameters for packet capture on the radio interfaces.

Table 1: Access Point Configuration Parameters for Packet Capture

Parameter

Description

Capture Beacons

  • When this parameter is enabled, the access point captures 802.11 beacons detected or transmitted by the radio.
  • Disabling beacon capture significantly reduces the number of packets captured by the radio in mostly idle networks.

Promiscuous Capture

  • When this parameter is enabled, the radio is placed in promiscuous mode (if packet capture is active) and the access point captures all traffic on the channel including traffic that is not destined for this access point.
  • As soon as the capture is done, the radio reverts to nonpromiscuous mode.

MAC filter

When this parameter is enabled, the access point captures only packets that are transmitted to or received from a client with the specified MAC address.

The MAC filter is active only when capture is performed on an 802.11 interface.

Note: When you activate the packet capture, the capture proceeds until the capture time reaches the configured duration, the capture file reaches its maximum size, or you stop the capture.

Published: 2014-05-22