802.11 Wireless Sniffing (Packet Capture)

Document

Jun 11, 2014 1:43 PM
Oct 24th, 2011


Table of Contents 

Introduction

In order to understand how and why 802.11 (WiFi) devices behave as they do, it is invaluable to perform a wireless packet capture ("sniffer".)  This can be especially important when working with Cisco TAC to resolve a technical problem.  The following articles will help you to choose and use a wireless sniffer.

Additionally, there are several commercially available wireless sniffer products:

  • OmniPeek from WildPackets
  • AirMagnet WiFi Analyzer from Fluke
  • CommView for WiFi from TamoSoft
  • AirPcap from Riverbed (formerly CACE)

When providing Cisco TAC with wireless packet captures, please supply them in a format that is readable by current Wireshark, and that includes 802.11 meta data (RSSI, channel, data rate) - such as OmniPeek (Airopeek) or Netmon 2.0 format.

Overall Rating: 5 (2 ratings)
dgohain Wed, 11/02/2011 - 12:12

great document thanks a lot Aaron

CARLOS ENRIQUE ... Wed, 09/04/2013 - 19:20

Super útil. Gran aporte.

Damon Garner Wed, 06/11/2014 - 13:43

Hello Aaron,

Just wanted to share this post with you:

https://supportforums.cisco.com/blog/12200881/using-live-linux-distro-get-wireless-packet-capture

Actions

Login or Register to take actions

This Document

Posted October 24, 2011 at 1:41 PM
Updated March 30, 2012 at 8:37 AM
Stats:
Comments:3 Overall Rating:5
Views:20277 Contributors:3
Shares:0

Related Content

 

Documents Leaderboard

Rank Username Points
1
TCC_2
118
2
airframes
45
3
George Stefanick
25
4
Rajesh Premachandran
15
5
ciscomoderator
10

Trending Topics: Other Wireless Mobility

client could not be authenticated
Network Analysis Module (NAM) Products
Cisco 6500 nam
reason 440 driver failure
Cisco password cracker
Cisco Wireless mode