Sniffer® Portable Professional User's Guide - NetScout

Chapter 1
Table 1-2. Features for Wireless Networks
Feature See this topic:
The Decode display can completely decode 802.11 traffic
(if the correct decryption keys are specified and, in the
case of WPA, if the initial EAPOL handshake packets are
seen). Since wireless LAN services take place at the lower
network layers, you can see the wireless-specific decodes
by examining the DLC layer in the Detail pane of the
Decode display. In addition, the Decode display indicates
the channel from which each packet was captured inside
brackets in the Status column of the Summary pane (for
example, an entry of [1] in the Status column indicates
that the packet was captured from channel number 1 on
the wireless LAN).
The Expert analyzer creates network objects at the DLC
layer for wireless stations. There are also several
Wireless-specific Expert alarms. In addition, all of the
usual upper layer Expert analysis is provided.
During monitoring or capture, the title bar of the Sniffer
window shows the channel currently being monitored, the
signal strength, and the network topology. You can use
this display to get a quick feel for the strength of the signal
being monitored and determine whether you need to move
the analyzer closer to an access point to get a stronger
signal.
16 Sniffer Portable Professional
Postcapture Decode Display on page
162
Decode and Expert Reference Guide
in Decode & Expert installation
directory.
Navigating the Sniffer Window on
page 41