pcap {start <bssid> <ip> <port> <format> <maxlen> [<channel>]|stop <bssid> <id>}


This command configures the wireless packet capture on an Instant AP and send the packets to a client packet analyzer utility like Airmagnet, Wireshark and so on, on a remote client.

Before using this command, you need to start the packet analyzer utility on the client and open a capture window for the port from which you are capturing packets. The packet analyzer cannot be used to control the flow or type of packets sent from the Instant APs.

The packet analyzer processes all packets. However, you can apply display filters on the capture window to control the number and type of packets being displayed. In the capture window, the timestamp displayed corresponds to the time that the packet is received by the client and is not synchronized with the time on the Instant AP.




Starts the packet capture configuration.


Indicates the basic bssid.


Indicates the IP address of the client running the packet analyzer.


indicates the UDP port number on the client station where the captured packets are sent.


Indicates the number assigned to each format for captured packets.


Indicates the maximum length of 802.11 frames to include in the capture.


Indicates the number of a radio channel to tune into to capture packets.


Stops the packet capture configuration.


Indicates the ID of the PCAP session.


The following example starts the packet capture configuration:

(Instant AP)# pcap start ac:a3:1e:57:bd:60 5555 0 1518

Command History



Aruba Instant

Command introduced.

Command Information


Command Mode

All platforms

Privileged Exec mode