Can't remember where it is off-hand, but there is a setting that says not to keep entries longer than x number of days; it defaults to 30 days. So you're seeing all the users from the past 30 days, I set mine to 0 days and it cleared that up.
Sorry, I wasn't cleared in my question. Take for example, one of my end host shows up on all my switches (28 total) in Campus User Tracking. It shows up on other switches as Gi1/1, the trunk link. Now you take 1500 end hosts and multiplied that by 28 switches and that is the amount of hosts I'm seeing in User Tracking.
This is not a problem with old entries but a problem with multiple entries.
Transferring Crash file from standby: Login to the Active WLC in HA.
From CLI: (Cisco Controller) >transfer upload datatype crash (Cisco
Controller) >transfer upload filename (Cisco
Controller) >transfer upload mode tftp (Cisco Controller) >transfer
This is the start of a display filter cross reference between Wireshark
and OmniPeek. The 1st installment is a table of advanced filters. More
filters will be added as time allows. It is a living doc, so check back
for changes every so often Please feel f...