Sniffer® Portable Professional User's Guide - NetScout

Real-Time Expert Display
Determining a Wireless Unit’s Full Hexadecimal Address
If you do not know the full hexadecimal address of a wireless unit (either
an access point or a mobile unit) in your network, you should first check
the unit. Often, the address is written on the equipment itself.
If this does not work, you can use the Host Table or Expert displays to
discover the address. However, because most displays substitute textual
manufacturer IDs for the first three bytes of a hexadecimal MAC address
(that is, a hexadecimal address of 0020d8014060 would usually be
identified in displays as Netwav014060), you need to know where to
look in Sniffer Portable Professional displays to find the entire address in
hexadecimal.
To determine a wireless unit’s full hexadecimal address:
1 Start capturing from the network containing the unit whose
address you want to determine. Alternatively, you can open a trace
file captured from that network.
2 In the Expert display, examine the Station Function column in the
Summary pane at the Wireless layer. In this column, locate an
entry for either an Access Point or a Mobile Unit. Highlight this
entry.
The Detail pane automatically updates to show statistics for the
entry selected in the Summary pane.
3 In the Detail pane, scroll down to the Wireless Address field. This
field shows the entire hexadecimal address of the selected unit. A
textual manufacturer’s ID is not substituted for the first portion of
the address.
4 Repeat this procedure for each access point on the network whose
full hexadecimal address you want to determine.
Importing and Exporting Known Addresses
Sniffer Portable Professional also provides export and import capabilities
for the known address lists in the Tools > Expert Options > 802.11
Options tab.
You can export the contents of either the Known Access Points or the
Known Mobile Units list using the corresponding Export button in the
802.11 Options tab. Exported files are saved in comma-separated
values (CSV) format. The exported file consists of a heading row with
the IP Address and MAC Address column headings followed by
multiple data rows in the format IP Address,MAC Address. For example,
a small exported CSV file might appear:
IP Address,MAC Address
User’s Guide 147