Sniffer® Portable Professional User's Guide - NetScout

Chapter 7
146 Sniffer Portable Professional
To add the address of an access point, click Add AP.
A new entry line becomes active in the Known Access
Points in the Network list with the active cursor in the MAC
Address column.
To add the address of a mobile unit, click Add MU.
A new entry line becomes active in the Known Mobile Units
in the Network list with the active cursor in the MAC
Address column.
3 Enter the MAC address of the access point or mobile unit in the
appropriate MAC Address column. You must enter the entire
address in hexadecimal format. The dialog box will not let you enter
an address that is not the proper length and format (twelve
characters, hexadecimal only). If you do not know the full
hexadecimal addresses of the access points in your network, see
Determining a Wireless Unit’s Full Hexadecimal Address on page
147.
4 Once you have entered a legal MAC address, you can also enter an
IP address in the IP Address column. For this release, IP
addresses are for your own reference only. The Expert only
compares MAC addresses when flagging wireless units as
rogues!
5 Repeat Step 2 through Step 4 for each access point or mobile unit
you want to add to the Expert’s list. You can enter as many
addresses as you like.
6 Turn on the Enable Rogue AP Lookup option and/or Enable
Rogue Mobile Unit Lookup option by checking the appropriate
boxes.
7 Click OK in the Expert Properties dialog box.
Once you have enabled the Rogue AP Lookup and/or Enable Rogue
Mobile Unit Lookup option and clicked OK, during subsequent
captures (and openings of trace files), Sniffer Portable Professional will
compare the MAC addresses of detected access points and mobile units
to those in the corresponding lists. Wireless entities not found in the
appropriate list will be flagged as rogues in both the Host Table and
Expert Summary and Detail displays. In addition, either the Rogue
Access Point or Rogue Mobile Unit alarm will be generated for each
detected rogue. See Rogue Identification in Sniffer Portable Professional
Displays on page 62 for information on how Sniffer Portable Professional
identifies rogues in its various displays.