TCPDUMP/Remote sniffer in cmd of AP

[patkszen]

I need to capture some traffic over separate from our corp link therefore AP won't be able to talk to HM. What is the process of running remote sniffer from CMD on AP130?

[patkszen]

Thanks, saved my day

[samantha_lynn]

Yes, the commands should be:

capture save interface wifix <file name or remote location where the packet capture will be saved>

This first command sets where the pcap file is saved. For example, if we wanted to run one for wifi0, and we're saving to a tftp server, the command would looks something like this;

capture save interface wifi0  tftp://server:/path/filename

The next command is:

capture interface wifix

This will start the capture on the interface you choose, wifi0 or wifi1.

[patkszen]

Yes this is it, I'll give it a go tomorrow​. Thank you

Just out of curiosity, are there any other means of capturing traffic so that file is saved locally on the ap?​

[samantha_lynn]

You can initiate a remote sniffer packet capture on the CLI of the AP with the command: exec capt remote-s host-a [IP address of device running wireshark].

Is that what you were looking for?