BRKEWN-3000

Wireshark on CA – Example Wireless Capture
You can check the file from the Console, but export is usually better
3850-T#show monitor capture file flash:/mycap.pcap ?
brief
brief display
detailed detailed disaply
display-filter Display filter
dump
for dump
Full hex dump
| Output modifiers
Just tell me what packets you saw
3850-T#show monitor capture file flash:/mycap.pcap brief
1 0.000000 00:00:00:00:00:00 -> 64:d9:89:46:ba:80 IEEE 802.11 Probe Request, SN=0,
FN=0, Flags=........
2 5.053998 10.10.21.221 -> 10.10.21.2 DTLSv1.0 Application Data
3 5.060010 10.10.21.221 -> 10.10.21.2 DTLSv1.0 Application Data
4 5.064999 10.10.21.221 -> 10.10.21.2 DTLSv1.0 Application Data
5 6.287995 00.00.26 -> 03.1a.f8 FC [Malformed Packet]
6 7.000000 00:00:00:00:00:00 -> 64:d9:89:46:ba:80 IEEE 802.11 Probe Request, SN=0,
FN=0, Flags=........
BRKEWN-3000 © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public 18