Cisco's Wireless Debug Analyzer

 If you are working as Wireless engineer or supporting wireless network then sometime you will definitely come across the situation when you need to debug the client logs to identify the problems, do so I. Analyzing those logs are tedious job but recently I found Cisco's "Wireless Debug Analyzer" which does this easy for us. You just upload the debug client <MAC> 

Many of you might have already aware of it but for me it was new & worth sharing with others. 

You can find this on Cisco.com Support>Tools & Resources> 

you can find this on Cisco.com Support>Tools & Resources> 

All Tools>Wireless Debug Analyzer.

Parses debug logs file for AireOS (WLC 5500/2500/8500/7500/WISM1-2/vWLC)
Makes it easier to troubleshoot issues with wireless client association, authentication, roaming or connectivity issues. Details

Tool aims to provide logical analysis based on log sequence matching against existing issues.
Reading and interpreting some of these voluminous debug log outputs with multiple client mac-addresses can become cumbersome.
  Input: "debug client <mac1> <mac2>..."
This tool also can parse through some portions of "debug aaa/webauth/mdns"  

1.Listen for Beacons
2.Probe Request
3.Probe Response
4.Authentication Request
5.Authentication Response
6.Association Request
7.Association Response
8.(Optional: EAPOL Authentication)
9.(Optional: Encrypt Data)
10.Forward User Data

Below is sample output you would get from Debug Analyzer

 1 Client made new Association to AP/BSSID BSSID (MAC Address)
2 The WLC/AP has found from client association request Information Element that claims PMKID Caching support
3 The Reassociation Request from the client comes with 1 PMKID
4 WLC cannot find a valid PMKID to match the one provided by the client. However, if the client performs OKC and not SKC, the WLC computes a new PMKID based on the information gathered (the cached PMK, the client MAC address, and the new AP MAC address)
5 No Fast Roaming: WLC is Unable to compute a valid PMKID from global/MSCB PMK cache for mobile
6 Client is entering the 802.1x or PSK Authentication state
7 Client has successfully cleared AP association phase
8 WLC/AP is sending an Association Response to the client with status code status 0
9 Client will be required to Reauthenticate in 1800 seconds
10 WLC/AP is sending EAP-Identity-Request to the client
11 Client sent EAP-Identity-Response to WLC/AP
12 RADIUS Server permitted access
13 Client will be required to Reauthenticate in 1800 seconds
14 4-Way PTK Handshake, Sending M1
15 4-Way PTK Handshake, Sending M1
16 4-Way PTK Handshake, Received M2
17 4-Way PTK Handshake, Sending M3
18 4-Way PTK Handshake, Sending M3
19 4-Way PTK Handshake, Received M4
20 Client has completed PSK Dot1x or WEP authentication phase
21 Client has entered DHCP Required state
22 Received DHCP Discover from client
23 Received DHCP Discover from client
24 Sending DHCP Request to DHCP Server CP through gateway 10.X.X.X requesting 10.X.X.X on VLAN sending REQUEST to 10.X.X.X (len 374, port 13, vlan 700)
25 Client has entered RUN state
26 Received DHCP ACK, assigning IP Address 10.X.X.X

Many thanks to Cisco for this tool & it's Contributors: Shankar Ramanathan & Eric A Nygren.