Remote Packet Capture

Remote packet capture allows users to remotely trigger, collect, and manage packet captures (pcap) from OmniVista-connected Access Points (APs), enabling centralized network troubleshooting, security analysis, and performance diagnostics without on-site intervention. Captures can be done in wireless or interface mode. Once the capture is done, it will be uploaded to OmniVista.

• Unsupported AP models: AP11xx, AP12xx

• Unsupported AP versions: 5.0.4.x and below

Remote Packet Capture (RPC) is accessible from Monitor > Diagnostic Tools > Remote Packet Capture on the OmniVista Cirrus Menu.

The table displays the list of captured files in the format APMAC-[WIRELESS/WIRED]-[BAND-CHANNEL/VLAN]-YYMMDDHHMM-SeqNum.pcap. Files can be downloaded or deleted using the available actions.

The user can download only the last segment of the APMAC-[WIRELESS/WIRED]-[BAND-CHANNEL/VLAN]-YYMMDDHHMM-SeqNum.pcap file (maximum size: 2 MB).

Performing a Packet Capture

1. Click on Start Remote Packet Capture.

2. Select the devices from which to capture and click Next.

The list displays all OmniVista-managed devices regardless of their connectivity status. However, users cannot select devices whose connectivity status is OFF.

Capture Mode Wireless

• 

  Capture Duration - Specify the packet capture duration. 5 mins (Minimum) - 60 mins (Maximum). The capture will stop automatically when it times out.

• Band - 2.4G, 5G, 6G

• Channel (e.g., 1-11 for 2.4G, 36-165 for 5G)

• Frame Type - Management, Control, Data

• MAC Address(es) - Matches source or destination (Up to 2 MAC addresses)

Capture Mode Interface

• Capture Duration - Specify the packet capture duration. 5 mins (Minimum) - 60 mins (Maximum). The capture will stop automatically when it times out.

• Interface Name - (e.g., "eth0"). Only the first interface is used.

• VLAN ID - VLAN IDs to filter (e.g., 100, 200).

• Protocol - tcp, udp, icmp

• IP - Matches source or destination (Up to 2 IP addresses)

• Port - Matches source or destination (Up to 2 ports)

• MAC Addresses(es) - Matches source or destination (Up to 2 MAC addresses)

Field values (e.g., Channel, Band, VLAN ID, etc.) are not validated. The administrator must ensure that the correct values are provided for packet capture.

3. Click Start Capturing Now.

Once the capture starts, an entry is created in the table with the “Capturing” state. The capture will stop automatically and the file will be available for download based on the Capture Duration parameter value. The capture can be stopped at any time during the capturing process using the Stop Capture action.