Comments on: WISP/CAPWAP Protocol (Ethereal) https://blog.michaelfmcnamara.com/2007/12/wispcapwap-protocol-ethereal/ technology, networking, virtualization and IP telephony Sat, 30 Oct 2021 14:23:52 +0000 hourly 1 https://wordpress.org/?v=6.7.2 By: Michael McNamara https://blog.michaelfmcnamara.com/2007/12/wispcapwap-protocol-ethereal/comment-page-1/#comment-1409 Tue, 03 Nov 2009 21:53:55 +0000 http://maddog.mlhs.org/blog/2007/12/wispcapwap-protocol-ethereal/#comment-1409 In reply to Neil.

Hi Neil,

I just download the file and tried it myself and it works fine. I was able to decode the CAPWAP packets between the Access Ports and the Motorola RFS7000 Wireless LAN Switch.

Sorry I couldn’t help you.

]]> By: Neil https://blog.michaelfmcnamara.com/2007/12/wispcapwap-protocol-ethereal/comment-page-1/#comment-1404 Tue, 03 Nov 2009 08:31:08 +0000 http://maddog.mlhs.org/blog/2007/12/wispcapwap-protocol-ethereal/#comment-1404 Hi Michael,

Thanks for you kind reply.
I can decode CAPWAP on my Linux machine now, I found that I have to patch CAPWAP protocol for Wireshark tool. On the Windows side, I still can not see the CAPWAP protocol with the ethereal you provide on your web site. Anyway, thanks for your help!!!

Best Regards,
Neil.

]]> By: Michael McNamara https://blog.michaelfmcnamara.com/2007/12/wispcapwap-protocol-ethereal/comment-page-1/#comment-1363 Mon, 19 Oct 2009 16:30:17 +0000 http://maddog.mlhs.org/blog/2007/12/wispcapwap-protocol-ethereal/#comment-1363 In reply to Neil.

Hi Neil,

I’m not exactly sure what your asking… if you are asking how I performed the actual packet capture I mirrored a port on my Nortel Ethernet Routing Switch 5520 where I had a Motorola Access Port 300 connected. I was capturing the packet stream between the AP300 and the network focusing on the data stream between the Motorola WS5100 and the Access Port.

Cheers!

]]> By: Neil https://blog.michaelfmcnamara.com/2007/12/wispcapwap-protocol-ethereal/comment-page-1/#comment-1362 Mon, 19 Oct 2009 14:01:18 +0000 http://maddog.mlhs.org/blog/2007/12/wispcapwap-protocol-ethereal/#comment-1362 Hi Michael,

I am implementing CAPWAP AC and WTP on Linux platform. Refer to your capture image, I am a littile confused about your captured environment. Could you please tell me the detailed topology for CAPWAP packet capturing?

Thanks for your help.

]]> By: malphx https://blog.michaelfmcnamara.com/2007/12/wispcapwap-protocol-ethereal/comment-page-1/#comment-68 Sat, 29 Mar 2008 21:49:00 +0000 http://maddog.mlhs.org/blog/2007/12/wispcapwap-protocol-ethereal/#comment-68 Thank you very much Michael !
It seems to work fine !

After i’ve read your post, i downloaded official version of ethereal 0.10.14 but it doesn’t decode WISP/CAPWAP. And unfortunatly i didn’t find the “good” one.

Thanks a lot, again.

]]> By: Michael McNamara https://blog.michaelfmcnamara.com/2007/12/wispcapwap-protocol-ethereal/comment-page-1/#comment-67 Sat, 29 Mar 2008 19:29:00 +0000 http://maddog.mlhs.org/blog/2007/12/wispcapwap-protocol-ethereal/#comment-67 Here’s the link for a version of Ethereal v0.10.14;

http://www.michaelfmcnamara.com/files/wisp-ethereal-setup-0.10.14.exe

that I believe should decode the WISP, WISPe and CAPWAP protocols.

As I’ve said before I’m not sure why some of the other distributions don’t work. I had hoped by now that WireShark would support CAPWAP and WISP. I may have to roll up my sleeves and install Microsoft Visual C++.

I just installed Ethereal using the link above and it lists both CAPWAP and WISP under Help -> Support Protocols.

Cheers!

]]> By: malphx https://blog.michaelfmcnamara.com/2007/12/wispcapwap-protocol-ethereal/comment-page-1/#comment-66 Sat, 29 Mar 2008 13:33:00 +0000 http://maddog.mlhs.org/blog/2007/12/wispcapwap-protocol-ethereal/#comment-66 Hi Michael,
Did you finally find a link to an ethereal version that can decode WISP.

I’m really interrested in decoding WISP/WISPe , so if you know a tool that can do that, let me know.

Thanks.

]]> By: Michael McNamara https://blog.michaelfmcnamara.com/2007/12/wispcapwap-protocol-ethereal/comment-page-1/#comment-65 Wed, 19 Mar 2008 22:38:00 +0000 http://maddog.mlhs.org/blog/2007/12/wispcapwap-protocol-ethereal/#comment-65 I was running Ethereal v0.10.14 on a Windows XP laptop.

Whenever I’m using Linux I just use tcpdump to capture the data and then look at it later with WireShark or Ethereal on a Windows XP laptop.

Cheers!

]]> By: Bousquet https://blog.michaelfmcnamara.com/2007/12/wispcapwap-protocol-ethereal/comment-page-1/#comment-64 Wed, 19 Mar 2008 09:50:00 +0000 http://maddog.mlhs.org/blog/2007/12/wispcapwap-protocol-ethereal/#comment-64 Hello Michael.
Your comments a very interesting.

What kind of linux did you use
to install ethereal v 0.10.14 ?

Thanks a lot !

]]>