You are here: Home > CLI Commands > Just_CLI_Topics > show ap monitor

show ap monitor

show ap monitor

active-laser-beams {ap-name <ap-name>|bssid <bssid>|ip-addr <ip-addr>|ip6-addr <ip6-addr>}[channel <channel>|phy <phy>]

ap-list {ap-name <ap-name>|bssid <bssid>|ip-addr <ip-addr>|ip6-addr <ip6-addr>}

channel {ap-name <ap-name>|bssid <bssid>|ip-addr <ip-addr>|ip6-addr <ip6-addr>}

client-list {ap-name <ap-name>|bssid <bssid>|ip-addr <ip-addr>|ip6-addr <ip6-addr>}

containment-info {ap-name <ap-name>|bssid <bssid>|ip-addr <ip-addr>|ip6-addr <ip6-addr>}

debug {counters|profile-config|status}[ap-name <ap-name>|bssid <bssid>|ip-addr <ip-addr>|ip6-addr <ip6-addr>]

ids-state {ap-name <ap-name>|bssid <bssid>|ip-addr <ip-addr>|ip6-addr <ip6-addr>}

mesh-list {ap-name <ap-name>|bssid <bssid>|ip-addr <ip-addr>|ip6-addr <ip6-addr>}

pot-ap-list {ap-name <ap-name>|bssid <bssid>|ip-addr <ip-addr>|ip6-addr <ip6-addr>}

pot-client-list {ap-name <ap-name>|bssid <bssid>|ip-addr <ip-addr>|ip6-addr <ip6-addr>}

routers {ap-name <ap-name>|bssid <bssid>|ip-addr <ip-addr>|ip6-addr <ip6-addr>}

scan-info {ap-name <ap-name>|bssid <bssid>|ip-addr <ip-addr>|ip6-addr <ip6-addr>}

stats {[ap-name <ap-name>]|[bssid <bssid>]|[ip-addr <ip-addr>]|[ip6-addr <ip6-addr>]|[mac <mac>] [duration <duration>] [verbose]}

stats advanced {[[ap-name <ap-name>]|[ip-addr <ip-addr>]|[ip6-addr <ip6-addr>][client-mac <client-mac>]]|[bssid <bssid>]}

wired-mac {ap-name <ap-name>}|{bssid <bssid>}|{ip-addr <ip-addr>}|[ip6-addr <ip6-addr>] {ap-bssid <ap-bssid>}|{config <config>}|{enet-mac <enet-mac>}|{gw-mac <gw-mac>}|{oui-prop <oui-prop>}|{system-gw-mac <system-gw-mac>}|{system-wired-mac <system-wired-mac>}

Description

Show information for Aruba Air Monitors.

Syntax

Parameter

Description

active-laser-beams

Show active laser beam generators.

The output of this command shows a list of all APs that are actively performing policy enforcement containment such as rogue containment. This command can tell us which AP is sending out deauthorization frames, although it does not specify which AP is being contained.

ap-list

Show list of APs being monitored.

arp-cache

Show ARPAddress Resolution Protocol. ARP is used for mapping IP network address to the hardware MAC address of a device. Cache of learned IP to MACMedia Access Control. A MAC address is a unique identifier assigned to network interfaces for communications on a network. binding

channel

Show state and stats of a specific channel.

client-list

Show list of client being monitored.

containment-info

Show containment events and counters triggered by the wired containment and wireless containment features configured in the ids general-profile. The output of this command shows device and target data for wired containment activity, a well as data for the following counters.

Wireless Containment Counters:

Last Deauth Timer Tick

Deauth frames to AP

Deauth frames to Client

Last Tarpit Timer Tick

Tarpit Frames: Probe Response

Tarpit Frames: Association Response

Tarpit Frames: Authentication

Tarpit Frames: Data from AP

Tarpit Frames: Data from Client

Last Enhanced Adhoc Containment Timer Tick

Enhanced Adhoc Containment: Frames To Data Sender

Enhanced Adhoc Containment: Frames To Data Receiver

Enhanced Adhoc Containment: Response to Request

Enhanced Adhoc Containment: Replay Response

Wired Containment Counters:

Last Wired Containment Timer Tick

Last Tagged Wired Containment Timer Tick

Spoof frames sent

Spoof frames sent on tagged VLANVirtual Local Area Network. In computer networking, a single Layer 2 network may be partitioned to create multiple distinct broadcast domains, which are mutually isolated so that packets can only pass between them through one or more routers; such a domain is referred to as a Virtual Local Area Network, Virtual LAN, or VLAN.

 

debug

Show the Air Monitor debugging information.

counters

Shows the maximum classification delay that was observed in monitored APs and clients, the number of Unclassified Device messages that were sent to the WMS, and the number of monitored APs/clients that were present in those messages. This parameter also shows the number of monitored APs/clients that were created and removed by the AP. This information is captured on an hourly basis for the last 24 hours.

NOTE: The maximum delay for clients is not displayed if the unclass_sta_update parameter is not enabled.

profile-config

Shows the configuration received by the AP for each profile.

status

Shows general AP status information and the maximum classification delay that was observed in monitored APs and clients, in the WLAN Interface option.

NOTE: The maximum delay for clients is not displayed if the unclass_sta_update parameter is not enabled.

ids-state

Show IDSIntrusion Detection System. IDS monitors a network or systems for malicious activity or policy violations and reports its findings to the management system deployed in the network. State.

ap-name

Name of Access Point.

bssid

BSSIDBasic Service Set Identifier. The BSSID identifies a particular BSS within an area. In infrastructure BSS networks, the BSSID is the MAC address of the AP. In independent BSS or ad hoc networks, the BSSID is generated randomly. of Access Point.

ip-addr

IP Address of Access Point.

ip6-addr

IPv6 Address of Access Point.

mesh-list

Show list of Mesh APs being monitored.

pot-ap-list

Display the Potential AP table. The Potential AP table shows the following data:

bssid: the AP’s Basic Service Set Identifier.

channel: The AP’s current radio channel

phy type: The radio’s PHY type. Possible values are 802.11a802.11a provides specifications for wireless systems. Networks using 802.11a operate at radio frequencies in the 5 GHz band. The specification uses a modulation scheme known as orthogonal frequency-division multiplexing (OFDM) that is especially well suited to use in office settings. The maximum data transfer rate is 54 Mbps., 802.11a802.11a provides specifications for wireless systems. Networks using 802.11a operate at radio frequencies in the 5 GHz band. The specification uses a modulation scheme known as orthogonal frequency-division multiplexing (OFDM) that is especially well suited to use in office settings. The maximum data transfer rate is 54 Mbps.-HTHigh Throughput. IEEE 802.11n is an HT WLAN standard that aims to achieve physical data rates of close to 600 Mbps on the 2.4 GHz and 5 GHz bands.-40, 802.11b802.11b is a WLAN standard often called Wi-Fi and is backward compatible with 802.11. Instead of the Phase-Shift Keying (PSK) modulation method used in 802.11 standards, 802.11b uses Complementary Code Keying (CCK) that allows higher data speeds and makes it less susceptible to multipath-propagation interference. 802.11b operates in the 2.4 GHz band and the maximum data transfer rate is 11 Mbps./g, 802.11b802.11b is a WLAN standard often called Wi-Fi and is backward compatible with 802.11. Instead of the Phase-Shift Keying (PSK) modulation method used in 802.11 standards, 802.11b uses Complementary Code Keying (CCK) that allows higher data speeds and makes it less susceptible to multipath-propagation interference. 802.11b operates in the 2.4 GHz band and the maximum data transfer rate is 11 Mbps./g-HTHigh Throughput. IEEE 802.11n is an HT WLAN standard that aims to achieve physical data rates of close to 600 Mbps on the 2.4 GHz and 5 GHz bands.-20.

num-beacons: Number of beacons seen during a 10-second scan

tot-beacons: Total number of beacons seen since the last reset.

num-frames: Total number of frames seen since the last rest.

mt: Monitor time; the number of timer ticks elapsed since the controller first recognized the AP.

at: Active time, in timer ticks.

ibss: Shows if adhoc BSSBasic Service Set. A BSS is a set of interconnected stations that can communicate with each other. BSS can be an independent BSS or infrastructure BSS. An independent BSS is an ad hoc network that does not include APs, whereas the infrastructure BSS consists of an AP and all its associated clients. is enabled or disabled. It will be enabled if the bssidBasic Service Set Identifier. The BSSID identifies a particular BSS within an area. In infrastructure BSS networks, the BSSID is the MAC address of the AP. In independent BSS or ad hoc networks, the BSSID is generated randomly. has detected an adhoc BSSBasic Service Set. A BSS is a set of interconnected stations that can communicate with each other. BSS can be an independent BSS or infrastructure BSS. An independent BSS is an ad hoc network that does not include APs, whereas the infrastructure BSS consists of an AP and all its associated clients. (an ibss bit in an 802.11802.11 is an evolving family of specifications for wireless LANs developed by a working group of the Institute of Electrical and Electronics Engineers (IEEE). 802.11 standards use the Ethernet protocol and Carrier Sense Multiple Access with collision avoidance (CSMA/CA) for path sharing. frame).

rssi: The Receive Signal Strength Indicator (RSSIReceived Signal Strength Indicator. RSSI is a mechanism by which RF energy is measured by the circuitry on a wireless NIC (0-255). The RSSI is not standard across vendors. Each vendor determines its own RSSI scale/values.) value displayed in the output of this command represents signal strength as a signal to noise ratio. For example, a value of 30 would indicate that the power of the received signal is 30 dBmDecibel-Milliwatts. dBm is a logarithmic measurement (integer) that is typically used in place of mW to represent receive-power level. AMP normalizes all signals to dBm, so that it is easy to evaluate performance between various vendors. above the signal noise threshold.

pot-client-list

Display the Potential client table. The Potential Client table shows the following values:

last-bssid: the Last BSSIDBasic Service Set Identifier. The BSSID identifies a particular BSS within an area. In infrastructure BSS networks, the BSSID is the MAC address of the AP. In independent BSS or ad hoc networks, the BSSID is generated randomly. to which the client associated.

from-bssid

to-bssid

mt: monitor time - the number of timer ticks elapsed since the controller first recognized the client.

it: client idle time - expressed as a number of timer ticks.

routers

Show Router MACMedia Access Control. A MAC address is a unique identifier assigned to network interfaces for communications on a network. Addresses learned. The output of this command includes the router’s MACMedia Access Control. A MAC address is a unique identifier assigned to network interfaces for communications on a network. address, IP address and uptime.

scan-info

Show AP scanning information.

stats

Shows statistics for an AP or a client.

mac <mac>

MACMedia Access Control. A MAC address is a unique identifier assigned to network interfaces for communications on a network. address of an AP or a client

duration <duration>

Duration to compute average signal strength in minutes. Default is 1 minute.

verbose

Shows statistics in verbose mode.

stats advanced

Shows advanced statistics for an AP or a client.

client-mac <client-mac>

MACMedia Access Control. A MAC address is a unique identifier assigned to network interfaces for communications on a network. address of client

wired-mac

Show Wired MACMedia Access Control. A MAC address is a unique identifier assigned to network interfaces for communications on a network. Addresses learned.

ap-name <ap-name>

Show data for an AP with a specific name.

bssid <bssid>

Show data for a specific Basic Service Set Identifier (BSSIDBasic Service Set Identifier. The BSSID identifies a particular BSS within an area. In infrastructure BSS networks, the BSSID is the MAC address of the AP. In independent BSS or ad hoc networks, the BSSID is generated randomly.) on an AP. The Basic Service Set Identifier (BSSIDBasic Service Set Identifier. The BSSID identifies a particular BSS within an area. In infrastructure BSS networks, the BSSID is the MAC address of the AP. In independent BSS or ad hoc networks, the BSSID is generated randomly.) is usually the AP’s MACMedia Access Control. A MAC address is a unique identifier assigned to network interfaces for communications on a network. address.

ip-addr <ip-addr>

Show data for an AP with a specific IP address by entering its IP address in dotted-decimal format.

ip6-addr <ip6-addr>

Show data for an AP with a specific IPv6 address by entering its IPv6 address in dotted-decimal format.

ap-bssid <ap-bssid>

Include the optional ap-bssid <ap-bssid> parameters to show how the AP is monitoring information for another AP with a specific BSSIDBasic Service Set Identifier. The BSSID identifies a particular BSS within an area. In infrastructure BSS networks, the BSSID is the MAC address of the AP. In independent BSS or ad hoc networks, the BSSID is generated randomly..

enet-mac <enet-mac>

Include the optional enet-mac <enet-mac> parameters to show how the AP is monitoring information for an interface with a specific EthernetEthernet is a network protocol for data transmission over LAN. MACMedia Access Control. A MAC address is a unique identifier assigned to network interfaces for communications on a network. address.

Examples

The output of the command displays the Monitored AP table, which lists all the APs monitored by a specified AP or BSSIDBasic Service Set Identifier. The BSSID identifies a particular BSS within an area. In infrastructure BSS networks, the BSSID is the MAC address of the AP. In independent BSS or ad hoc networks, the BSSID is generated randomly..

(host) #show ap monitor ap-list ap-name al12

 

Monitored AP Table

------------------

bssid essid chan ap-type phy-type dos dt/mt ut/it

----- ----- ---- ------- -------- --- ----- -----

24:de:c6:be:c3:fa bridge-85 161 interfering 80211a-HT-40 disable 33633/17957 0/0

24:de:c6:8e:aa:86 ap214-tb2-%apprf% 11 interfering 80211b/g-HT-20 disable 33633/33633 0/0

24:de:c6:be:b7:3a bridge-85 64 interfering 80211a-HT-40 disable 33633/17065 8/4

24:de:c6:be:bf:fa bridge-85 149 interfering 80211a-HT-40 disable 33633/17404 0/0

24:de:c6:8e:9a:85 sys-tb2-4meshpt 11 interfering 80211b/g-HT-20 disable 33633/33633 0/0

9c:1c:12:89:e2:95 RBC-BYOD 153 interfering 80211a-VHT-20 disable 33633/33633 1/0

24:de:c6:be:bd:f8 Centl2-250 157 interfering 80211a-HT-40 disable 33633/17914 0/0

24:de:c6:be:bd:f9 Centl2-251 157 interfering 80211a-HT-40 disable 33633/17800 0/0

24:de:c6:8e:9a:86 ap214-tb2-%apprf% 11 interfering 80211b/g-HT-20 disable 33633/33633 0/0

9c:1c:12:89:e2:93 ssid1-vc-wpa 153 interfering 80211a-VHT-20 disable 33633/33633 0/0

 

encr nstas avg-snr curr-snr avg-rssi curr-rssi wmacs ibss cl-delay

---- ----- ------- -------- -------- --------- ----- ---- --------

wpa2-psk-aes 0 37 37 57 58 0 no 0

open 0 53 55 41 40 0 no 0

wpa2-psk-aes 0 45 45 49 50 0 no 0

wpa2-psk-aes 0 37 37 57 58 0 no 0

wpa2-psk-aes 0 50 56 44 39 0 no 0

wpa2-psk-aes 0 38 40 56 55 0 no 0

wpa2-psk-aes 0 30 31 64 64 0 no 0

wpa2-8021x-aes 0 30 31 64 64 0 no 0

open 0 52 55 42 40 0 no 0

wpa-psk-tkip 0 38 40 56 55 0 no 0

The output of this command includes the following information:

Parameter

Description

bssid

Basic Service Set Identifier for (bssidBasic Service Set Identifier. The BSSID identifies a particular BSS within an area. In infrastructure BSS networks, the BSSID is the MAC address of the AP. In independent BSS or ad hoc networks, the BSSID is generated randomly.) an AP. This is usually the AP’s MACMedia Access Control. A MAC address is a unique identifier assigned to network interfaces for communications on a network. address.

essid

Extended service set identifier that names a wireless network.

chan

Radio channel used by the BSSIDBasic Service Set Identifier. The BSSID identifies a particular BSS within an area. In infrastructure BSS networks, the BSSID is the MAC address of the AP. In independent BSS or ad hoc networks, the BSSID is generated randomly..

ap-type

Shows classification of the AP.

phy-type

Radio phy type. Possible types include:

802.11a802.11a provides specifications for wireless systems. Networks using 802.11a operate at radio frequencies in the 5 GHz band. The specification uses a modulation scheme known as orthogonal frequency-division multiplexing (OFDM) that is especially well suited to use in office settings. The maximum data transfer rate is 54 Mbps.

802.11a802.11a provides specifications for wireless systems. Networks using 802.11a operate at radio frequencies in the 5 GHz band. The specification uses a modulation scheme known as orthogonal frequency-division multiplexing (OFDM) that is especially well suited to use in office settings. The maximum data transfer rate is 54 Mbps.-HTHigh Throughput. IEEE 802.11n is an HT WLAN standard that aims to achieve physical data rates of close to 600 Mbps on the 2.4 GHz and 5 GHz bands.-40

802.11b802.11b is a WLAN standard often called Wi-Fi and is backward compatible with 802.11. Instead of the Phase-Shift Keying (PSK) modulation method used in 802.11 standards, 802.11b uses Complementary Code Keying (CCK) that allows higher data speeds and makes it less susceptible to multipath-propagation interference. 802.11b operates in the 2.4 GHz band and the maximum data transfer rate is 11 Mbps./g

802.11b802.11b is a WLAN standard often called Wi-Fi and is backward compatible with 802.11. Instead of the Phase-Shift Keying (PSK) modulation method used in 802.11 standards, 802.11b uses Complementary Code Keying (CCK) that allows higher data speeds and makes it less susceptible to multipath-propagation interference. 802.11b operates in the 2.4 GHz band and the maximum data transfer rate is 11 Mbps./g-HTHigh Throughput. IEEE 802.11n is an HT WLAN standard that aims to achieve physical data rates of close to 600 Mbps on the 2.4 GHz and 5 GHz bands.-20

dos

Shows if the feature to contain DoSDenial of Service. DoS is any type of attack where the attackers send excessive messages to flood traffic and thereby preventing the legitimate users from accessing the service. attacks has been enabled or disabled.

dt/mt

dt—Detected time: the number of timer ticks since the AP was last detected.

mt—Monitor time; the number of elapsed timer ticks since the AP first recognized the monitored AP.

ut/it

ut—Unseen time: the number elapsed timer ticks the monitored AP was not seen when scanning a channel of the device.

it—AP idle time, the number of timer ticks since the AP last saw any frames from the monitored AP.

encr

Shows the encryption type of the BSSIDBasic Service Set Identifier. The BSSID identifies a particular BSS within an area. In infrastructure BSS networks, the BSSID is the MAC address of the AP. In independent BSS or ad hoc networks, the BSSID is generated randomly.. If there are multiple encryption types, this command shows the lowest encryption type.

ntsas

Shows the number of stations connected to the AP (as seen by the monitoring AP).

avg-snr

Shows the average Signal to Noise Ratio (SNRSignal-to-Noise Ratio. SNR is used for comparing the level of a desired signal with the level of background noise.).

curr-snr

Shows the current Signal to Noise Ratio (SNRSignal-to-Noise Ratio. SNR is used for comparing the level of a desired signal with the level of background noise.).

avg-rssi

Shows the average RSSIReceived Signal Strength Indicator. RSSI is a mechanism by which RF energy is measured by the circuitry on a wireless NIC (0-255). The RSSI is not standard across vendors. Each vendor determines its own RSSI scale/values. (Received Signal Strength) for the device.

NOTE: RSSIReceived Signal Strength Indicator. RSSI is a mechanism by which RF energy is measured by the circuitry on a wireless NIC (0-255). The RSSI is not standard across vendors. Each vendor determines its own RSSI scale/values. is an indication of the power level being received by the antenna. Therefore, the higher the RSSIReceived Signal Strength Indicator. RSSI is a mechanism by which RF energy is measured by the circuitry on a wireless NIC (0-255). The RSSI is not standard across vendors. Each vendor determines its own RSSI scale/values. number, the stronger the signal.

curr-rssi

Shows the current RSSIReceived Signal Strength Indicator. RSSI is a mechanism by which RF energy is measured by the circuitry on a wireless NIC (0-255). The RSSI is not standard across vendors. Each vendor determines its own RSSI scale/values. for the device.

wmacs

Shows the number of unique wireless MACMedia Access Control. A MAC address is a unique identifier assigned to network interfaces for communications on a network. addresses seen on the Wi-FiWi-Fi is a technology that allows electronic devices to connect to a WLAN network, mainly using the 2.4 GHz and 5 GHz radio bands. Wi-Fi can apply to products that use any 802.11 standard. network from the AP's BSSIDBasic Service Set Identifier. The BSSID identifies a particular BSS within an area. In infrastructure BSS networks, the BSSID is the MAC address of the AP. In independent BSS or ad hoc networks, the BSSID is generated randomly..

ibss

Shows all the monitored APs (BSSIDsBasic Service Set Identifier. The BSSID identifies a particular BSS within an area. In infrastructure BSS networks, the BSSID is the MAC address of the AP. In independent BSS or ad hoc networks, the BSSID is generated randomly.).

cl-delay

Shows the delay in classification of each device.

NOTE: The maximum delay for clients is not displayed if the unclass_sta_update parameter is not enabled.

Related Commands

Command

Description

show ap monitor debug

This command shows information for an Air Monitor’s current status, message counters, or profile settings.

Command History

Command

Description

ArubaOS 8.0.0.0

Command introduced.

Command Information

Platforms

Licensing

Command Mode

All platforms

Base operating system.

Enable or Config mode on Mobility Master.

/*]]>*/