Specifications
Remotely Monitoring Traffic
RoamAbout Mobility System Software Configuration Guide A-17
Thefollowingcommandconfiguresasnoopfilternamedsnoop2thatmatchesonalldatatraffic
betweenthedevicewithMACaddressaa:bb:cc:dd:ee:ffandthedevicewithMACaddress
11:22:33:44:55:66,andcopiesthetraffictothedevicethathasIPaddress10.10.30.3:
RBT-8100# set snoop snoop2 frame-type eq data mac-pair aa:bb:cc:dd:ee:ff
11:22:33:44:55:66 observer 10.10.30.3 snap-length 100
Displaying Configured Snoop Filters
TodisplaythesnoopfiltersconfiguredontheRAS,usethefollowingcommand:
show snoop info [filter-name]
Thefollowingcommandshowsthesnoopfiltersconfiguredintheexamplesabove:
RBT-8100# show snoop info
snoop1:
observer 10.10.30.2 snap-length 100
all packets
snoop2:
observer 10.10.30.3 snap-length 100
frame-type eq data
mac-pair (aa:bb:cc:dd:ee:ff, 11:22:33:44:55:66)
Editing a Snoop Filter
Toeditasnoopfilter,youcanusetheshowconfigurationareasnoopcommandtodisplaythe
filter’sconfigurationcommand,thenusecut‐and‐pastetoreconstructthecommand.
Deleting a Snoop Filter
Todeleteasnoopfilter,usethefollowingcommand:
clear snoop filter-name
Mapping a Snoop Filter to a Radio
YoucanmapasnoopfiltertoaradioonaDistributedAP.Tomapasnoopfiltertoaradio,usethe
followingcommand:
set snoop map filter-name dap dap-num radio {1 | 2}
Youcanmapthesamefiltertomorethanoneradio.Youcanmapuptoeightfilterstothesame
radio.Ifmorethanonefilterhasthesameobserver,theAPsendsonlyonecopyofapacketthat
matchesafiltertotheobserver.Afterthefirstmatch,
theAPsendsthepacketandstopscomparing
thepacketagainstotherfiltersforthesameobserver.
Ifthefilterdoesnothaveanobserver,theAPstillmaintainsacounterofthenumberofpackets
thatmatchthefilter.(See“DisplayingRemoteTrafficMonitoringStatistics”onpage A‐19.)
The
followingcommandmapssnoopfiltersnoop1toradio2onDistributedAP3:
RBT-8100# set snoop map snoop1 dap 3 radio 2
success: change accepted.