Allied Telesis AT-WR4500 Sniffer Packets, Snooper, Sniffed packets, Freq SIGNAL@RATE SRC DST Type

AT-WR4500 Series - IEEE 802.11abgh Outdoor Wireless Routers	59
RouterOS v3 Configuration and User Guide

file-size(read-only: integer) - current file size (kB)

memory-over-limit-packets(read-only: integer) - number of packets that are dropped because of exceeding memory-limit

memory-saved-packets(read-only: integer) - how many packets are stored in mermory

memory-size(read-only: integer) - how much memory is currently used for sniffed packets (kB)

processed-packets(read-only: integer) - number of sniffed packets

real-file-limit(read-only: integer) - the real file size limit. It is calculated from the beginning of sniffing to reserve at least 1MB free space on the disk

real-memory-limit(read-only: integer) - the real memory size limit. It is calculated from the beginning of sniffing to reserve at least 1MB of free space in the memory

stream-dropped-packets(read-only: integer) - number of packets that are dropped because of exceeding streaming-max-rate

stream-sent-packets(read-only: integer) - number of packets that are sent to the streaming server

Command Description

save - saves sniffed packets from the memory to file-name in PCAP format

4.3.19Sniffer Packets

Description

Wireless Sniffer sniffed packets. If packets Cyclic Redundancy Check (CRC) field detects error, it will be displayed by crc-error flag.

Property Description

band (read-only: text) - wireless band

dst (read-only: MAC address) - the receiver's MAC address

freq (read-only: integer) - frequency

interface (read-only: text) - wireless interface that captures packets

signal@rate (read-only: text) - at which signal-strength and rate was the packet received

src (read-only: MAC address) - the sender's MAC address

time (read-only: time) - time when the packet was received, starting from the beginning of sniffing

type (read-only: assoc-req assoc-resp reassoc-req reassoc-resp probe-req probe-resp beacon atim disassoc auth deauth ps-poll rts cts ack cf-end cf-endack data d-cfack d-cfpoll d- cfackpoll data-null nd-cfack nd-cfpoll nd-cfackpoll) - type of the sniffed packet

Example

Sniffed packets:

[admin@AT-WR4562] interface wireless sniffer packet> pr
Flags: E - crc-error
#	FREQ SIGNAL@RATE		SRC	DST	TYPE
0	2412	-73dBm@1Mbps	00:0B:6B:31:00:53	FF:FF:FF:FF:FF:FF	beacon
1	2412	-91dBm@1Mbps	00:02:6F:01:CE:2E	FF:FF:FF:FF:FF:FF	beacon
2	2412	-45dBm@1Mbps	00:02:6F:05:68:D3	FF:FF:FF:FF:FF:FF	beacon
3	2412	-72dBm@1Mbps	00:60:B3:8C:98:3F	FF:FF:FF:FF:FF:FF	beacon
4	2412	-65dBm@1Mbps	00:01:24:70:3D:4E	FF:FF:FF:FF:FF:FF	probe-req
5	2412	-60dBm@1Mbps	00:01:24:70:3D:4E	FF:FF:FF:FF:FF:FF	probe-req
6	2412	-61dBm@1Mbps	00:01:24:70:3D:4E	FF:FF:FF:FF:FF:FF	probe-req

4.3.20Snooper

Submenu level: /interface wireless snooper

Description

With wireless snooper you can monitor the traffic load on each channel.