Thursday 27 February 2020

Aruba UXI Packet Capture Issue

One of the key features I hoped to make use of in the Aruba UXI sensor (formerly Cape Networks) is remote packet capture. This is performed on the sensor status page as shown below:

The problem is that it doesn't produce a file that is readable in Wireshark, with most of the 802.11 frames marked as malformed.
After raising this issue with Aruba support they came back with a response after over two weeks to say that this is a bug:
"The sensor do not capture the full packet off the wire, the snap length is 2048 bytes at the moment including the Radiotap headers, which means that sometimes wireshark won't be able to fully parse the packets.
The backend team is still working on the this."
Considering that the last update to the UXI sensor was on Aug 2019 it is a bit concerning that they either haven't noticed this issue or that they can't fix it. I can't help getting the feeling that the development of this product is on the Aruba back burner now.

No comments:

Post a Comment

Emoji Wi-Fi on Cisco C9800 Catalyst

A nice feature for some situations is to use an Emoji SSID instead of a plain text SSID. Many Wi-Fi controllers support this by allowing cut...