04-27-2009 07:49 AM - edited 07-03-2021 05:30 PM
I'm researching a little into wireless troubleshooting and I'm starting to get a little confused about the differences between several modes available on Cisco access points. The ones I'm looking at are:
- monitor mode
- sniffer mode
- scanner mode
I take it some allow client connections and some do not. And some look at all channels and some do not. Is sniffer mode and scanner mode the same thing?
Also... some Cisco pages say that sniffer mode can only be used with Airopeek. But a Cisco Press book I'm reading says it operates with an Omnipeak, Airmagnet, or Wireshark server. Which is correct? Is there a Wireshark server?
Thanks!
04-27-2009 08:02 AM
Take a look at this link
http://supportwiki.cisco.com/ViewWiki/index.php/The_different_modes_in_which_the_LAP_can_operate
I am not sure about the compatible software for sniffer mode. I've never tried that feature so someone else will have to chime in.
04-27-2009 09:31 AM
I see, so...
- monitor mode: doesn't allow client connections; cycles through all channels; listens to each channel for 60 minutes
- sniffer mode: allows client connections; listens to only one channel
Is that basically the difference?
Has anyone used scanner mode ('station role scanner' on the radio interface)?
04-27-2009 08:03 AM
Here is a good link that should answer your question:
https://supportwiki.cisco.com/ViewWiki/index.php/The_different_modes_in_which_the_LAP_can_operate
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: