topic Re: XIQ - Capture ethernet interface date local to the AP in ExtremeCloud IQ

XIQ - Capture ethernet interface date local to the AP

StephanH — Wed, 20 Jan 2021 15:07:32 GMT

Hello community,

is there a way to capture data from the ethernet ports localy on the AP? I don't care if the packages are only displayed or saved to a file.

There are the following commands:

Aero#capture interface
<wifix> Enter the name of a Wi-Fi radio interface, where x = 0 or 1
Aero#capture save interface
<wifix> Enter the name of a Wi-Fi radio interface, where x = 0 or 1

but with this you can only select Wifi interfaces. Is there something comparable for the Ethernet port?

Re: XIQ - Capture ethernet interface date local to the AP

SamPirok — Thu, 21 Jan 2021 00:33:45 GMT

Hi Stephan, I’m not finding anything similar for Ethernet ports (maybe someone else will have a suggestion), but I do think this has been a feature request before. If you can submit another feature request for this with your SE, that will help promote that request for faster implementation. If you aren’t sure who to reach out to for your SE, please let me know and I’ll email that information directly to you.

Re: XIQ - Capture ethernet interface date local to the AP

w1f1n00b — Fri, 22 Jan 2021 00:50:42 GMT

Well, now I wanna know more about the capture interface commands. Any guides or info on this?

Re: XIQ - Capture ethernet interface date local to the AP

w1f1n00b — Fri, 22 Jan 2021 00:54:49 GMT

NM, Just found this - https://extremeportal.force.com/ExtrArticleDetail?an=000079772&q=%22capture%20interface%22

Re: XIQ - Capture ethernet interface date local to the AP

StephanH — Fri, 22 Jan 2021 01:14:43 GMT

Hello John,

that is also all I know. At the beginning of my search I came across the command via this old page:
https://docs.aerohive.com/330000/docs/help/english/6.1r1/ref/cli_guide320-340.htm#cmd141

But the KB article you mentioned says more.

Re: XIQ - Capture ethernet interface date local to the AP

reinhardg — Tue, 02 Feb 2021 18:13:38 GMT

This might be a workaround:

Check whether your switch has something like a “mirror port” feature. If your switch has this feature, you can mirror the ethernet traffic of the port your AP is connected to to another switch port and connect a network sniffer to that port.

Re: XIQ - Capture ethernet interface date local to the AP

StephanH — Tue, 02 Feb 2021 18:17:38 GMT

Hello Reinhard,

thanks for the suggestion. Specifically, I had the problem that the data I got on the mirror port and the data that really arrives on the AP were different. Therefore, the mirror port was not enough for me and I hoped to see more through the trace in the AP.

In addition, the function of the trace on the AP would be especially helpful if you do not have access to the switches.

Re: XIQ - Capture ethernet interface date local to the AP

reinhardg — Tue, 02 Feb 2021 18:32:09 GMT

Hello Stephan,

in case the data on the mirror port is different to the data on the AP port I would assume that the port mirroring on the switch does not work correctly. How did you verify that?

You are right: Being dependent from the LAN admins might be a bit annoying.