Skip to content

Capturing wifi traffic with Cisco Aironet access point.

Capturing wifi traffic with Cisco Aironet access point. published on No Comments on Capturing wifi traffic with Cisco Aironet access point.

It is possible to use Cisco Aironet as wifi sniffer. The device can operate in monitor mode and sending packets to specified destination. This is implemented by WIDS (Wireless IDS?) protocol.
In this case, the packets were capturing using Wireshak. I configured access point to work in monitor mode and to send packets to my computer on address 192.168.51.24 and on 5555 port.

Now device sends packets to my computer, I can launch Wireshark and see them. There is need to set proper packets decoding as CWIDS.

decode_traffic

Additionally I set filters to only see traffic from the access point.

wireshark

It is important to note, that the device is able to monitor only one channel in the same time, but channel can be easily changed: