Related Forum Post with commands forums.lawrencesystems.com/t/using-wireshark-with-unifi-access-points-for-real-time-packet-capture/7967 pfsense wireshark video ru-vid.com/video/%D0%B2%D0%B8%D0%B4%D0%B5%D0%BE-a9t_7JKpsmg.html SSH Keys Video ru-vid.com/video/%D0%B2%D0%B8%D0%B4%D0%B5%D0%BE-vINn1MIrf7o.html
Remote capture is awesome. Wireshark makes it even easier in many situations by offering to set up tcpdump for you. Look for the "SSH remote capture" item at the bottom of the interface list and click the cog/settings button to set it up. It will SSH to the remote and run tcpdump, then set up all the piping automatically.
One day my WEMO (Belkin) auto plugs and switches were working fine on my local lan. They all worked. Then the app asked to be updated, ok, updated for security seems ok, then I notice they all started surfing the net because their new directives were to report home to the cloud. I blocked them, then they all stopped working. So out they came and they are paperweights now. You don't own anything if it needs cloud access.
I had a similar issue with my WEMO devices because all are blocked from accessing the WAN. I got mine to work when a made a firewall rule to allow them to PING the gateway address. This was some time ago and have not updated them since. But are connect to their own VLAN.
Same here, I have two Unifi APs with an iot vlan and no port isolation anywhere but when my phone is on one AP I can't see the Chromecast if its on there other AP. If I reboot one AP so all devices are on the same AP I can see the Chromecast. Very annoying and difficult to troubleshoot
I finally got around to using this to debug a troublesome TV receiver and I was able to determine that the issue was not because of something I did. I did have a bit of an issue though, I had to create an ssh keypair and add the public key to the unifi controller, if I tried to ssh in using my password ssh would try three times to login without a password and fail.
This is very useful, thank you. I do have the same question as some others about whether we can capture the 802.11 packet headers and management frames, is there a way to put the ap radio into monitor mode? Wireshark is very useful for debugging the wifi protocols as well, but you need the 802.11 packet headers and the management packets.
Hah, thanks, was just troubleshooting a Chromecast the last few days on a Unifi AP without success. Maybe this will help. I have two Unifi APs with an iot vlan and no port isolation anywhere but when my phone is on one AP I can't see the Chromecast if its on there other AP. If I reboot one AP so all devices are on the same AP I can see the Chromecast. Very annoying and difficult to troubleshoot and only happening on recent firmwares (>3 months ago) ☹️
Really!?!?! This is really useful. I didn’t know lol I have UniFi AP at home and always use SPAN port at my switch (cisco) to capture traffic coming form the APs when troubleshooting
I just want to put my experience with unifi so far out there. I have been trying to purchase 1800$ worth of equipment from their website with no luck for 2 days their support is almost non existent the resellers are ignorant and out of stock of anything of value and my credit card company and bank both say they havent even tried to chrage either card once. Im honestly at a loss,
I needed to create a quick script for sshing into a linux box from my windows machine and doing x11 forwarding for wireshark. Here it is in case it helps - pastebin.com/JaH8RcfT
This was too long for showing just 1-2 commands. I was hoping you would show this on a windows environment also or showing an -output syntax to the command. So that I could at least output the capture to my windows machine.
@@trumpetpunk42 I can enter the command if I cd into the Wireshark folder under C:\Program FIles. But I can't figure out the correct syntax to use for the ssh into my AP.
