BRKEWN-3000

Wireshark on CA Logic
1. To use Wireshark, you have to define:
• The attachment point (where you want to capture from)
• Optionally, a capture filter (what should be captured from that attachment point, called
“core filter”)
• When capturing wireless traffic from an AP, do not use core filter
• You can use core filter to capture traffic from a specific client
• A destination (where do you send the captured packets)
2. You then start/stop the capture, only one capture at a time
• You can add destinations there too
• You can also use display filters if you send to the console
3. Most of the time, you then use the capture in a PC Wireshark
• You can then use display filter there as well
BRKEWN-3000 © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public 14