Specifications

set snoop
Chapter 22
Snoop Commands
617
Defaults No snoop filters are configured by default.
Access Enabled.
Usage Traffic that matches a snoop filter is copied after it is decrypted. The
decrypted (clear) version is sent to the observer.
For best results:
l Do not specify an observer that is associated with the UNIVERGE WL
Access Points where the snoop filter is running. This configuration causes an
endless cycle of snoop traffic.
l If the snoop filter is running on a UNIVERGE WL Access Points, and the
UNIVERGE WL Access Points used a DHCP server in its local subnet to
configure its IP information, and the UNIVERGE WL Access Points did not
receive a default router (gateway) address as a result, the observer must also
be in the same subnet. Without a default router, the UNIVERGE WL Access
Points cannot find the observer.
l The UNIVERGE WL Access Points that is running a snoop filter forwards
snooped packets directly to the observer. This is a one-way communication,
from the UNIVERGE WL Access Points to the observer. If the observer is not
present, the UNIVERGE WL Access Points still sends the snoop packets,
which use bandwidth. If the observer is present but is not listening to TZSP
traffic, the observer continuously sends ICMP error indications back to the
UNIVERGE WL Access Points. These ICMP messages can affect network
and UNIVERGE WL Access Points performance.
Examples The following command configures a snoop filter named snoop1 that
matches on all traffic, and copies the traffic to the device that has IP address
10.10.30.2:
PROPMT# set snoop snoop1 observer 10.10.30.2 snap-length 100
observer ip-addr Specifies the IP address of the station where the protocol
analyzer is located. If you do not specify an observer, the
UNIVERGE WL Access Points radio still counts the packets
that match the filter.
snap-length num Specifies the maximum number of bytes to capture. If you
do not specify a length, the entire packet is copied and sent
to the observer. UNIVERGE WL Control System
recommends specifying a snap length of 100 bytes or less.