cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1197
Views
0
Helpful
2
Replies

Cisco Wireless Controller 2125

x96harig12
Level 1
Level 1

Cisco wireless controller is sending out malform packets across the network.  Wireshark reports numerous malform packets with the source of the Wireless Controller.  when we unplug the WC the malformed packets go away and our network returns to total normal.  We do have the lastest firmware on it.  We do have multicast on, because we use a program called synchroneyes at the school.  We have about 20 AP's on it.

Thanks

Marty

2 Replies 2

x96harig12
Level 1
Level 1

turning of multicast, or enabling IGMP Snooping reduces the malformed packets.

Nicolas Darchis
Cisco Employee
Cisco Employee

Hi Martin,

never blindly trust Wireshark about malformed packets, it may simply be that it's not decoding it properly.

For example, if you don't turn lwapp/capwap decryption on, Wireshark thinks that all lwapp/capwap traffic contain malformed wireless probe requests.

So I'd suggest you look more closely at the packet and check what is malformed about it. If it's correct up to the lwapp/capwap payload, then you shouldn't worry.

Make sure you have the latest wireshark version and in "Edit->preferences" turn on capwap/lwapp decryption

Nicolas

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: