The accesspoints and wireless management interface should have a routable ip address
In priv mode on the Cisco catalyst 3850
AP name <name> mode sniffer
AP name <name> sniff <dot11a/dot11b> <channel> <ip address sniffer>
On the sniffer you can decode traffic from wireless management interface as peekremote