NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
RBR40 and RBS40 wifi - Wishing to capture/monitor traffic/BW usage of connected wifi devices
Hello
Have had this model RBR40 RBS40 of Orbi for some time and am very happy with its performance once I installed two corresponding satellite units. I am keen to capture the usage of each wifi...
Joined wrote:
........... But I am guessing the Orbi NAT’s will not allow me to capture the wifi devices individually and since being a consumer product there will not be the option to disable the NAT.
............
Completely agree with CrimpOn. Orbi in AP mode does not do any NAT. Only when you set Orbi in Router Mode it will do NAT.
I neglected to mention that besides mirroring WAN traffic to Port 1, Orbi's "debug screen" also allows capturing LAN/WAN traffic either to system memory or to a USB drive. I have done this numerous times, although I do not leave it running for a long time. To be honest, I have never tried saving to USB drive. If I wanted to capture a substantial amount of data, I would probably try that first. These capture files are zip files (compressed) and include LAN and WAN in separate Wireshark files, plus a bunch of other stuff.
Oh, fudge. Also neglected to verify that RBR40 actually has a USB port. Looks like it does not. My bad. Sorry.
Hello
Thanks for the helpful advice FURRYe38,@CrimpOn and ekhalil. The VDSL modem is a Huawei HG659b. You were correct. I can see the individual IP devices in the IP table for the VDSL modem. I had read commentary here that NAT was enabled on the AP mode and had taken that as correct and not looked closely enough at the IP address listings of the Huawei. On your advice I have since attempted to test out the functionality of the WAN to LAN Port1 mirroring by clicking the setting under "ipaddress/debug.htm". I also tried the capture file setting to RAM since this hardware version does not support a USB socket. The capture file appeared all fine (I confess I got lost looking at the data not being a network specialist) . It did not seem to show individual IP addresses. I have also set up a windows tablet running Wireshark (and incidently Microsoft Message Analyser) connected (and monitoring ) Port1 of the LAN ports of the Orbi. (Now this was a challenge also: I am guessing that Port1 is the port that is closest to the external Internet port of the Orbi - am I correct here?).
Both tools seem to capture all traffic except WiFi Apple devices such as my iphone or Ipad. Have I missed something obvious? is there a layer 2 or layer 3 issue here. Am I looking at the wrong layer?
As an another test I have also placed a DD-WRT based switch between the VDSL modem and the Orbi to show what the LAN DD-WRT status looks like. This display was equally uninformative.Showning very little activity. Presumably I will need to enable TCPdump but i just thought it was going to be a simple solution to capture the individual device traffic...Appreciate some indulgence if you have some time to comment further. Chris
