I'm trying to put together a sniff environment where wireless client hit a WAP, the waps wired ethernet port brings the traffic back to a port mirror switch for me to look at. Does anyone know how to get a WAP to stop "local switching" (the wap seems to switch the local traffic and only allows traffic destined to a different network to come over the wired port. I want to see everything). Once I'm at the wired switch, wireshark can do its thing.
asked 02 Apr '12, 12:51
Maybe you could use a Wireless LAN Controller and a dumb Access Point and port mirror the WLC, it might just pose a whole new array of questions though.. A WLC should handle most of the traffic of an AP , what exactly are you hoping to find?
answered 05 Apr '12, 01:20