topic Re: Remote packet capture on wired interface in Aerohive Migrated Content

Remote packet capture on wired interface

wim_goeminne — Mon, 11 Mar 2019 17:00:25 GMT

In Hivemanager Classic we had ability to do remote packet capture from the uplink interface.

In NG, I cannot find this feature anymore (only WIFI interfaces)

Did this feature disappear?

Thanks,

Wim

Re: Remote packet capture on wired interface

samantha_lynn — Mon, 11 Mar 2019 20:02:25 GMT

This is correct, there is no longer a GUI option to do this with HiveManager. You can SSH in to the AP and enable a remote sniffer with the command "exec capt remote-s host-a <IPaddress>" where the IP address is the address of the device that will be running wireshark. Once you enable the remote sniffer on the AP CLI, you'd want to launch wireshark and see what interfaces it will pick up. I can send you a guide on this procedure if you'd like. It's a bit outdated because of the Packet capture feature we added to HiveManager to replace this procedure, but it will walk you through the CLI method if you're interested.

Re: Remote packet capture on wired interface

wim_goeminne — Mon, 11 Mar 2019 23:23:52 GMT

Hi Sam,

Sure you can fwd me the procedure
Thanks!

Wim

Re: Remote packet capture on wired interface

samantha_lynn — Mon, 11 Mar 2019 23:34:17 GMT

Hi Wim, I've sent that over to you. Please let me know if i can clarify anything in that guide!

Re: Remote packet capture on wired interface

lance_romigh1 — Fri, 25 Oct 2019 00:47:17 GMT

Can I get access to this procedure? I am currently dealing with HMNG_VA, and it doesn't have the packet capture utility, only cloudshark.

Re: Remote packet capture on wired interface

samantha_lynn — Fri, 25 Oct 2019 01:21:17 GMT

Hi @Lance Romigh , I've emailed that guide over to you as well. Please let me know if anything doesn't make sense in the guide and I'll do my best to clarify.

Re: Remote packet capture on wired interface

lance_romigh1 — Fri, 25 Oct 2019 03:23:12 GMT

Got it! I was able to use the CLI guide to get it configured. It was a local VA, so PC was on the same subnet. exec capture remote-sniffer [ user <string> <string> ] [ host-allowed <string> ] [ local-port <number> ] [ promiscuous ]