Displaying client tcp traffic

Unanswered Question
Feb 10th, 2009

I want to see what my associated users are connecting to [ip address] and what tcp port.

I see a command that is close to what I'm looking for....show tcp brief. This is what I get:

TCB Local Address Foreign Address (state)

00B1063C laptop.am.4823 ESTAB

[This shows my laptop hitting the AP on port 23.]

The problem is that this is from the AP perspective, I'm looking for connection details from a user perspective.

Does anyone know if this is possible and if so what command would accomplish this?

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
ericgarnel Wed, 02/18/2009 - 07:09

You will want to look into netflow

there are several commercial apps that do this as well as open source apps such as ntop.

You can also get such info along with even more detail using sniffer software.

The cisco wireless system has the ability to feed a sniffer app from the wireless directly.

if you are using 4.x wlc, you can feed it to airopeek, if you are using 5.x & above, you can point it at wireshark



This Discussion



Trending Topics: Other Wireless Mobility

client could not be authenticated
Network Analysis Module (NAM) Products
Cisco 6500 nam
reason 440 driver failure
Cisco password cracker
Cisco Wireless mode