73
To isolate the scan to a single channel:
a. Tap the desired channel in the channel list so it is highlighted.
b. To scan another channel, simply tap on the desired channel.
c. To return to scanning all channels in the Channel List, tap the highlighted channel again
to unselect.
3) Access Points/Client/Not Connected (NC) Client List
Within Detail View, this list shows the MAC addresses associated with the selected device. For
Access Points, the list will contain associated Clients. For Clients, the list will contain connected
Access Points. However, in the case of a Not Connected (NC) Client, the space labeled as AP will
contain a list of probe requests, rather than connected APs. Often this probe request will appear
as FF:FF:FF:FF:FF:FF which is the broadcast global probe request. Occasionally, a specific MAC
address will be displayed, which indicates a formerly connected AP that this NC Client is
searching for. An NC Client is not currently connected to any Access Point.
When analyzing these lists, keep in mind, not all listed connections will show up in the WiFi
Main Screen list. There are several possible reasons for this:
o An Access Point may be connected to a Client that itself is not in range of the MESA 2.0.
o A Client is sending probe requests for an AP that it was formerly connected with. An
example would be a phone searching for a favorite coffee shop’s saved WiFi router.
o A Client has moved out of range. An example: an office worker left for lunch with their
phone.
o A Client may no longer be transmitting a WiFi signal.
o An Access Point has moved out of range *
*Clients can be stationary, like a desktop computer or printer, or they can be movable, i.e.,
laptop computers and cellular phones. Access Points, however, are more often stationary.
Finding a stationary Client device that is searching for an Access Point that is no longer
present should raise interest.
Devices are classified by the MESA 2.0 as Access Points, Clients, or NC Clients based on data
packets called frames. A specific type of identifier frame is called a beacon frame. These beacon
frames are how the MESA 2.0 identifies the device. Some devices will initially be classified as a
Client, but as the additional frames are received, they may be promoted to an Access Point. At
the beginning of a scan, a Client device might first appear as an NC Client, but with adequate
scan length (depending on the received frames), it may become classified as a Client. A longer
scan will better classify and identify devices, so it’s beneficial to run the scan longer than the
minimum of 15 seconds.
To Next Page
Loading...
Need help?
General
