Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 
Community Member

Displaying client tcp traffic

I want to see what my associated users are connecting to [ip address] and what tcp port.

I see a command that is close to what I'm looking tcp brief. This is what I get:

TCB Local Address Foreign Address (state)

00B1063C ESTAB

[This shows my laptop hitting the AP on port 23.]

The problem is that this is from the AP perspective, I'm looking for connection details from a user perspective.

Does anyone know if this is possible and if so what command would accomplish this?


Re: Displaying client tcp traffic

You will want to look into netflow

there are several commercial apps that do this as well as open source apps such as ntop.

You can also get such info along with even more detail using sniffer software.

The cisco wireless system has the ability to feed a sniffer app from the wireless directly.

if you are using 4.x wlc, you can feed it to airopeek, if you are using 5.x & above, you can point it at wireshark

CreatePlease to create content