tri_94 Posted July 8, 2016 Author Posted July 8, 2016 Thanks for that. When you say mirror a port I've seen an option on my Switches for that, how does it work what do I do? "some" Yes likley normal. Hundred per second, no not normal. You print server is likely polling the printers. This point of this particular exercise is to see **ALL** the traffic. If there is a flood of some kind it will drown out all the other background 'noise'. If you are only seeing "who has ip xxx.xxx.xxx.xxx tell nnn.nnn.nnn.nnn" packets, then you are not in promiscious mode. Mind you, if there are only a few per seocnd then this shouldn't be a problem.... UNLESS for some reason all clients wireless-side are responding, inwhich case that could be flooding the wifi, and leaving the wire-side relatively un-impacted. Perhaps a better refinement would be to mirror a port your AP is connected to and watch that. If you see 50-100Mb/s traffic in either direction your wifi is being flooded.
psydii Posted July 8, 2016 Posted July 8, 2016 https://www.miarec.com/faq/what-is-port-mirroring Tom Roholm IT and then some: HP Comware port mirroring Simple port mirroring. Plug you device with wireshark into the monitor port.
m25man Posted July 13, 2016 Posted July 13, 2016 What points are they? and what controller version and firmware are the APs using? There is a mammoth thread covering this issue on the Unifi forums.
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now