Sniffer® Portable Professional User's Guide - NetScout

Adding Known Addresses to the List
Real-Time Expert Display
To use the rogue identification abilities of Sniffer Portable Professional
effectively, you must first add the MAC addresses of the known access
points and mobile units on your network to the Expert’s list of known
wireless unit addresses. There are several ways to do this:
Automatically from the real-time Host Table. See Adding Known
Addresses from the Host Table on page 141.
Automatically from the Expert tab of the postcapture display. See
Adding Known Addresses from the Postcapture Display on page
143.
Automatically from the Address Book. See Autodiscovering and
Adding Addresses from the Address Book on page 145.
Manually from the 802.11 Options tab of the Expert Properties
dialog box. See Adding Known Addresses Manually in the 802.11
Options Tab on page 145.
In addition, you can also import and export lists of known addresses (for
example, you can import addresses from other Sniffer Portable
Professional installations). The following sections describe how to use
each of these methods.
Adding Known Addresses from the Host Table
Use the following procedure to add the MAC addresses of known wireless
units (either access points or mobile units) automatically from the Host
Table during real-time monitoring.
To add known addresses automatically from the Host Table:
1 Open the Monitor > Host Table application.
The Host Table appears. During real-time monitoring, the Host
Table adds one-line entries for each detected wireless unit (access
points and mobile units) on the network.
2 If the 802.11 tab is not already displayed, click its entry at the
bottom of the Host Table. You can display either the full 802.11 tab,
or, alternatively, click the Access Point button to zoom in on
access points only.
User’s Guide 141