72E-151Motorola AirDefense Mobile 6.0 User Guide 876-01_AirDefense_Mobile_User_Guide (Rev A) by Advantec Distribution

M AirDefense Mobile 6.0 User Guide

ÂŠ 2011 Motorola Solutions, Inc. All rights reserved. MOTOROLA and the Stylized M Logo are registered in the US Patent & Trademark Office. All other product or service names are the property of their respective owners.

Contents Chapter 1. Introduction 1.1 Chapter Contents. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-1 1.2 Overview of an AirDefense Mobile. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-1 1.3 Getting Started . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-2

Chapter 2. Live Monitoring 2.1 Chapter Contents. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-1 2.2 Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-2 2.3 Common Area . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-2 2.3.1 Menus . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-3 2.3.2 Buttons. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-5 2.3.3 Dropdown Menus . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-5 2.3.4 Live View Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-7 2.3.5 Channel Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-8 2.3.6 Frame Filter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-9 2.3.7 Manage Licenses. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-11 2.3.7.1 Add Licenses . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-12 2.3.7.2 System MAC . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-12 2.3.7.3 System Keys. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-12 2.4 Data Tab . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-13 2.5 Connections Tab . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-19 2.6 Devices Tab . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-22 2.7 Frames Tab . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-25 2.7.1 Table View . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-26 2.7.2 Frames View . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-28 2.8 Survey Tab. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-28 2.8.1 Creating Floor Plans. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-29 2.8.1.1 Upload Image. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-30 2.8.1.2 Add Additional Flors . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-32 2.8.1.3 Add Devices . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-33 2.8.2 Menus . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-34 2.8.2.1 Dropdown Menus . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-34 2.8.2.2 Right-Click Menus . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-35 2.8.3 Tools. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-36 2.8.4 Conducting a Site Survey. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-36 2.8.5 Visualizing Survey Data . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-38 2.9 Frame Capture . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-40

TOC-2 AirDefense Mobile User Guide

Chapter 3. Frame Capture Analysis 3.1 Chapter Contents. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-1 3.2 Getting Started . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-1 3.3 Common Area . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-2 3.3.1 Menus . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-3 3.3.2 Buttons. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-3 3.3.3 Dropdown Menus . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-3 3.3.4 Time Window. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-3 3.3.5 Loaded Frames Slide Bar . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-4 3.4 Tabs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-4

Chapter 4. Spectrum Analysis 4.1 4.2 4.3 4.4 4.5 4.6

Chapter Contents. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-1 Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-2 Spectrum Settings. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-3 Spectrogram . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-3 Interference Sources . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-4 Save Spectrum Data . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-5

Chapter 5. Locate Device 5.1 Chapter Contents. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-1 5.2 Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-1 5.3 Using Locate Device . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-2

About This Guide Preface This guide is designed to help you use AirDefense Mobile to analyze real-time data traffic flow from devices in your wireless LAN from your laptop. This guide is intended for information security administrators and people who are responsible for reporting on and analyzing wireless LAN data.

Scope of Documentation This guide covers: • How to use Mobile to analyze traffic flow as it happens • How to use Mobile to survey a site • How to use Mobile to analyze frames captured to a file • How to use Mobile to identify and locate interference sources on your wireless network • How to locate a device. It does not cover initial hardware installation or the basic device configuration you need to perform to get the appliance up and running.

Additional Resources The AirDefense Mobile product has the following additional resources to help you use the system more effectively: • AirDefense Mobile Installation Guide. • AirDefense Mobile Online Help.

AirDefense Mobile User Guide

Document Conventions The following conventions are used in this document to draw your attention to important information: NOTE: Indicate tips or special requirements.

CAUTION: Indicates conditions that can cause equipment damage or data loss.

WARNING! Indicates a condition or procedure that could result in personal injury or equipment damage.

Notational Conventions The following additional notational conventions are used in this document: • Italics are used to highlight the following:  Chapters and sections in this and related documents  Dialog box, window and screen names  Drop-down list and list box names  Check box and radio button names  Icons on a screen. • GUI text is used to highlight the following:  Screen names  Menu items  Button names on a screen. • Bullets (•) indicate:  Action items  Lists of alternatives  Lists of required steps not necessarily sequential • Sequential lists (those that describe step-by-step procedures) appear as numbered lists.

Introduction 1.1 Chapter Contents This chapter includes the following sections: Section

Page

Overview of an AirDefense Mobile

1-1

Getting Started

1-2

1.2 Overview of an AirDefense Mobile AirDefense Mobile allows you to analyze real-time data traffic flow from devices in your wireless LAN from your laptop. It gives you a live view of the APs or Stations operating in your wireless LAN. You can drill down into a live, streaming view of devices, BSSIDs, and channels to review remote frame captures, authentication errors, AP configuration issues & network interference. You access AirDefense Mobile by double-clicking the AirDefense Mobile 6.0 icon on your desktop. There are five features to AirDefense Mobile: • Live Monitoring where you analyze traffic flow as it happens • Survey where you can record 802.11 measurement data and display that data as a heat map over an image • Frame Capture Analysis where you analyze frames that were captured to a file during a Live Monitoring session • Spectrum Analysis where you can identify and locate interference sources on your wireless network. • Locate Device where you can locate a seen device. AirDefense Mobile provides five main categories of information: • Data • Connections • Devices • Frames • Survey (optional with Mobile Survey license). Each category has its own tab within the application.

1-2 AirDefense Mobile User Guide

1.3 Getting Started To access AirDefense Mobile for the first time, double-click the AirDefense Mobile 6.0 icon on your desktop. One of three things will happen: • If a Mobile license is not installed, AirDefense Mobile opens with the Licensing dialog. • AirDefense Mobile displays with no data being collected. • The following popup window displays if you have installed more than one network adapter:

If this window displays, select an adapter and then click OK. AirDefense Mobile now displays with no data being collected.

Live Monitoring 2.1 Chapter Contents This chapter includes the following sections: Section

Page

Overview

2-2

Common Area

2-2

Data Tab

2-13

Connections Tab

2-19

Devices Tab

2-22

Frames Tab

2-25

Survey Tab

2-28

Frame Capture

2-40

2-2 AirDefense Mobile User Guide

2.2 Overview Live Monitoring allows you to monitor and analyze real-time data traffic flow from devices in your wireless LAN. It also allows you to conduct site surveys on locations within your company. NOTE: To conduct site surveys, you must first set up the Survey feature using the Survey tab. You start a Live Monitoring session by accessing the Mobile application and then either: • Click the Start button–

• Select Session > Start.

A Live Monitoring session can only display 50,000 frames at one time. If more than 50,000 frames have been capture, only the most recent 50,000 frames are displayed.

2.3 Common Area The common area holds the menus and buttons that are common to AirDefense Mobile. It is located at the top of the window.

Live Monitoring 2-3

2.3.1 Menus Menu

Option

Description

File

New

Starts a new project.

Open

Opens a saved frame capture file, a saved tracking file, a saved spectrum data file, or a Survey project that resides on your laptop.

Export to ADSP

Exports a survey project to your ADSP system. Before using this feature, you must configure ADSP settings under Configure > Configure ADSP Settings.

Import From ADSP

Imports a survey project from your ADSP system. Before using this feature, you must configure ADSP settings under Configure > Configure ADSP Settings.

Save

Saves frame capture data (via the Save Frame Capture popup window) in analysis mode or Survey project (via the Save Project popup window) in survey mode.

Save As

Opens the Save Project popup window where you can save an existing survey project to a new file.

Close Project

Closes the current project. Prompts you to save the project. If prompted, click Yes to save or No to not save the project.

Export Measurment Data

Exports measurement data to a MLZ file.

Import Measurement Data

Imports measurement data to a MLZ file.

Delete Measurement Data

Deletes measurement data files from Mobile.

Import AirMagnet Data

Imports measurement data collected from AirMagnet Survey saved in a SVD file. Only Passive survey files are supported.

Generate Report

Generates a multi-table report and displays the results. You have the option to select from six tables or you may select all the tables. The results includes: • Project name • Total number of floors • Total number of BSSs detected • List of measurment files including file name, timestamp of measurement run, duration of measurement run, and number of measurement points.

Prompts you to save captured frames if no project is open or prompts to save an opened Project. If prompted, click Yes to save or No to not save the captured frames or project. Exits from Mobile 6 when done.

2-4 AirDefense Mobile User Guide

Option

Description

Session

Select Adapter

Opens the Select Adapter popup window where you can select a different adapter.

Settings

Opens the Mobile Settings popup window where you can set options for your Live Monitoring sessions. (See Live View Settings for more information.)

Channel Settings

Opens the Channel Settings popup window where you can specify which channels Mobile should utilize during a monitoring session. (See Channel Settings for more information.)

Start

Starts a Live Monitoring session.

Stop

Stops a Live Monitoring session.

Freeze

Freezes a Live Monitoring session. The data in the window freezes but AirDefense Mobile keeps collecting data to display later after you unfreeze the session.

Edit Filters

Opens the Frame Filter popup window where you can set options to filter data. (See Frame Filterfor more information.)

Spectrum Analysis

Opens Spectrum View window and runs Spectrum Analysis.

Configure ADSP Settings

Opens the Configure ADSP Settings window so that you can supply an IP address of an ADSP appliance along with login credentials for the appliance. These settings are used to export data to and import data from the specified ADSP appliance.

Configure Proxy Setting

Allows you to configure proxy settings if you are required to do so to access the internet.

Configure Marker Settings

Allows you to set the size of the survey markers.

Manage Licenses

Opens the Manage Licenses window so that you can manage your Mobile 6 licenses. (See Manage Licenses.)

Help Contents

Opens the AirDefense Mobile Online Help.

About

Displays information about AirDefense Mobile 5.3 such as version number, release date, and copyright notice.

Support

Opens the Support sub-window and provides information for:

Configure

Help

• Hyperlink to support center to open or view known issues and cases • Call Center Support phone numbers • Email address • Home website for AirDefense.

Live Monitoring 2-5

2.3.2 Buttons Button

Description Starts a Live Monitoring session.

Stops a Live Monitoring session.

Freezes a Live Monitoring session. The data in the window freezes but AirDefense Mobile keeps collecting data to display later after you unfreeze the session. Click the Freeze button again to unfreeze the session. Displays the heat map of a site survey after a scan or after loading a project file.

Opens the Frame Filter popup window. where you can set options to filter data. (See Frame Filter for more information.) Opens the Spectrum View window where you can identify and locate interference sources on your wireless network. (See Spectrum Analysis for more information.) Note: You cannot access Spectrum Analysis if you are using a USB adapter.

2.3.3 Dropdown Menus Dropdown Menu

Description

Frame Selection

Acts as a quick filter to display only frames for the selected frame type. To view all types, select All Frames.

RSSI Selection

Acts as a quick filter to view only frames specified in the RSSI (Received Signal Strength Indicator) range. Slide the two sliders to specify a range. Specifying an RSSI range will render the heat map using the selected values while visualizing a project. Changes are reflected in the heat map as well as the other four tabs.

2-6 AirDefense Mobile User Guide

Dropdown Menu

Description

Device Selection

Used to isolate heat maps for individual BSSs. Works when grouped with SSID/Channel/Type/Air Standard. To select BSSs, type in a partial or full MAC address in the Find Devices field. Depending on the Group by and Sort by fields a tree is displayed listing the BSSs that match the find string.

Select each BSS that you want to view frames for by placing a checkmark in the checkbox next to the device. The Group by field groups BSSs according to: • SSID • Channel • Type • Authorization State • Name • Air Standard. The Sort by field sorts second level nodes (BSS) using the same selections for the Group by field. The New Device field allows you to add a new BSS. You must type in the full MAC address and then click the Add button (+). If the BSS is found, it is added to the tree. You can select a BSS to be ignored by clicking on the BSS and then dragging it to the Ignore Bucket. BSSs placed in the Ignore Bucket are only removed from the tree. Data from ignored BSSs is not be displayed. You can remove all BSSs in the Ignore Bucket and place them back in the tree by clicking the Restore button.

Live Monitoring 2-7

2.3.4 Live View Settings Motorola AirDefense Mobile has four user adjustable settings contain in two tabs: Capture Settings and Gain Settings. Located in the Capture Settings tab are: Setting

Description

Capture Management Frames

Sets the Live Monitoring sessions to capture management frames. If selected, you can also truncate management frames to a specific number of bytes or have no truncation.

Capture Control Frames

Sets the Live Monitoring sessions to capture control frames. If selected, you can also truncate control frames to a specific number of bytes or have no truncation.

Capture Data Frames

Sets the Live Monitoring sessions to capture data frames. If selected, you can also truncate data frames to a specific number of bytes or have no truncation.

Located in the Gain Settings tab is the Gain Value setting. A gain value (specified in dBi) can be specified to remove the antenna gain from the readings taken devices. This action allows the measurements taken from different devices to be brought to the same level (the gain value specified). For example, if two users were running sessions using a different network card with gain values of 2 and 3, the RSSI readings recorded would be offset by the corresponding values. Now, if the measurement files were to be visualized with another card with a gain value 2, all readings will be offset by a 2 gain value; thus, giving you a common gain value for the captured data being visualized. To change the settings: 1. Select File > Settings to display the Live View Settings window.

2. Make your adjustments/specifications. 3. Click OK.

2-8 AirDefense Mobile User Guide

2.3.5 Channel Settings The Channel Settings table displays all available channels and allows you to select channels, select the 802.11N extension, and set scan weight for each selected channel. Select File > Channel Settings to display the Channel Settings popup window.

The Lock On Channel dropdown menu allows you to select which channels to scan. You can select a group of channels such as 1-6-11, UNII-1, UNII-2, or UNII-3, or you can select a single channel from the menu. Selecting 1-6-11 will scan channels 1, 6 and 11 while setting the scan time for each channel to the default (100 ms) or to the time specified in the Time field.. Selecting UNII-1 will scan channels 36, 40, 44 and 48 while setting the scan time for each channel to the default (100 ms) or to the time specified in the Time field. Selecting UNII-2 will scan channels 56, 60 and 64 while setting the scan time for each channel to the default (100 ms) or to the time specified in the Time field. Selecting UNII-3 will scan channels 149, 153, 157and 161 while setting the scan time for each channel to the default (100 ms) or to the time specified in the Time field. The Bandwidth field allows you to set the scan bandwidth to 20 MHz, 40 MHz, or both. You can also select which channels to scan by selecting the checkbox next to the channel in the table. Selecting the checkbox at the top of the Scan column will select all channels. If you type in a time value at the top of the Time column, you will set scan time of all the channels. You can set the scan time of each channel individually by typing in a time value for a particular channel. The .11N Ext column is only active for the 40 MHz bandwidth. When the field is active, you can select the 802.11N extension for each channel being scanned. If you want to detect 40 MHz Access Points in 20 MHz scans, click the Advanced Settings button, select the checkbox; and then click OK.

Live Monitoring 2-9

2.3.6 Frame Filter Method

Description

Connections

Filters Mobile frames by connections. To filter by connections, go to the Connections tab, select Filter frames by Connections, and select any of the following conditions: • Any Address • Source • Destination • BSSID • A1 (RX) • A1 (TX) • A3 • A4 For every condition that you select, you must specify a MAC address. You have the option of displaying frames that match all of the selected conditions or displaying frames that match any of the selected conditions.

Frame Type

Filters Mobile frames by 802.11 frame type. To filter by frame types, go to the Frame Type tab, select Filter frames by frame type, and de-select any frame type that you do not want to display. You may filter out a whole category (Control, Management, or Data) or any of the sub-categories.

Channels

Filters Mobile frames by channels. To filter by channels, go to the Channels tab, select Filter frames by channel, and de-select the channels that you do not want to display. You may filter out a whole category (b/g,a, or n) of channels or individual channels.

Rates

Filters Mobile frames by transmission rate. To filter by transmission rate, go to the Rates tab, select Filter frames by rate, and de-select any rate that you do not want to display.

Data

Filters Mobile frames by data type. To filter by data type, go to the Data tab, select Filter frames by data, de-select any of the encryption types that you do not want to display, and de-select any of the Ether types that you do not want to display.

2-10 AirDefense Mobile User Guide

To filter Mobile frames: 1. Select File > Edit Filters or click the Filter button to display the Frame Filter popup window.

2. Set your filter criteria by clicking on the appropriate tab. 3. Click OK.

Live Monitoring 2-11

2.3.7 Manage Licenses Manage Licenses opens an License window where you can manage licenses associated with Mobile 6. Navigate to Help > Manage Licenses to access the License window.

There are three actions you can take to manage licenses: • Add License • Copy the MAC address of your system • Download your system keys (ENC file) to your local file system. The table near the bottom of the window lists: • License type • Activation start date • Activation warning date • Activation expiration date.

2-12 AirDefense Mobile User Guide

2.3.7.1 Add Licenses There are three ways to install a license: • Using a license file • Using an authorization code • Using a legacy license key.

Using a License File A license file contains information about your license. If you have a license file, select the I have a License File option. You will be prompted to select the license file. Use the browse button (...) to locate the file and select it. Once you have selected the licensing file, click Apply. The license information is updated.

Using an Authorization Code If you have an authorization code, select the I have an authorization Code option. Enter your authorization code, company name, contact phone number, and email address. Then, click Apply. The license is installed using the authorization code. NOTE: If you need to use a proxy to access the internet, select the Use proxy for Internet Access option. The proxy settings must already be configured using Configure > Configure Proxy Settings.

Using a Legacy License Key If you have a license key, just type in the key and click Apply. The license is installed using the license key. NOTE: When you use a legacy license key from a previous version of Mobile, the Survey feature of Mobile 6 is not activated.

2.3.7.2 System MAC You can display the MAC address of the system where you can copy it for later use. Click the Copy button next to the System MAC field to display and copy the MAC address.

2.3.7.3 System Keys You can generate a system key for your system from the License window. Follow these steps to generate a system key: 1. Click Export next to the System Keys field and navigate to the location where you want to save the system key file. 2. Click the Save button.

Live Monitoring 2-13

2.4 Data Tab The Data tab displays data charts that allows you to analyze different types of data from the selected device.

You can review more information for some charts by rolling your cursor over the chart. If additional information is available, it is displayed in a popup. You can right-click on any chart to reveal the following commands: • Maximize—Maximizes the chart, overlaying it directly over the other charts. • Restore—Restores the chart to its previous state. • Remove—Removes the chart from the display area. This is the same as clicking the Remove button (

The Data tab focus can be changed by changing the view. Depending on the view that is selected different charts are displayed. There are four available views: View

Description

Summary

Provides a summary of frame data using the following charts: • Traffic By Authorization • Retry • Traffic By Rate • Traffic By Channel • Devices By Authorization. This is the default view.

Device Analysis

Changes the frame data focus to device information. Charts relating to device information are displayed.

2-14 AirDefense Mobile User Guide

View

Description

Channel Analysis 2.4 GHz (a/b/n)

Changes the frame data focus to channel information on the 2.4 GHz band for 802.11b/g/n network traffic. Charts relating to channel information are displayed.

Channel Analysis 5 GHz (a/n)

Changes the frame data focus to channel information on the 5 GHz band for 802.11a/n network traffic. Charts relating to channel information are displayed.

Each view is customizable. You can add more charts to a view, rearrange the view, or remove charts from a view. To add a chart to a view, click the View Available Charts buttonâ&#x20AC;&#x201C;

to reveal the Available Charts.

Once the Available Charts are revealed, you can drag and drop a chart to the display area. You can display up to nine charts. To view a chart temporarily, click on the chart name. It will display superimposed over the current charts. To hide Available Charts, click the Hide Available Charts button.

Live Monitoring 2-15

The following table gives a brief description of each chart: Chart

Description The number of data frames observed by sub-type (data, no data, QoS data, QoS no data) The amount of frames seen by the different data rates observed Total amount of frames seen by the different data rates observed Total number of devices observed by the authentication method used (if EAP information is available, EAP type is displayed) Total number of devices observed by authorization (authorized, unauthorized, ignored) Total number of devices observed using B/G protection mode Total number of devices observed by protocol The number of devices seen on the different channels Total number of devices observed in the different channels Total number of devices observed by the encryption method used (CCMP, none, TKIP, TKIP/CCMP, WEP) The number of devices observed by type (BSS, Wireless Client, unknown) Total number of devices observed (BSSs, Wireless Clients, unknown devices) Total number of frames observed by preamble Total number of frames observed by priority (QS information) Total number of frames observed by size (in bytes) Total amount of traffic observed by sub-type (select Control, Mgmt, or Data from dropdown menu to view the different sub-types) The number of frames observed by type (control, data, management) Total amount of traffic observed by type (control, data, management) The number of retry frames observed as related to bandwidth A device's signal strength (in dBm) as observed by the Sensor

2-16 AirDefense Mobile User Guide

Chart

Description Signal strength (in dBm) observed over the different channels emphasizing the following information: • All changes of every device as measured by the height of the chart • Amount of traffic by color • Co-channel interference by the selected device The amount of traffic per selected metric (frames, bytes, % utilization) The top devices sending the most traffic Busiest devices (devices with the most traffic) The amount of traffic observed by channel showing the total units and retry units Total amount of traffic observed by channel The amount of traffic by destination (broadcast, multicast, unicast) The amount of traffic by the different protocols (802.11a, 802.11b, 802.11g, 802.11n) Total amount of traffic observed by protocol (802.11a, 802.11b, 802.11g, 802.11n) The amount of traffic based on the traffic configured state (authorized, unauthorized, unknown) The percentage of utilization as seen over the individual channels, each bar in the chart displaying up to four categories (Available, Available Overhead, Used, Used Overhead)

Dropdown menus are available to customize the view of the charts as indicated in the following table: Chart

Dropdown Menus

X X

Live Monitoring 2-17

Chart

Dropdown Menus X X

X X

X X X X X

X X

X X X

X X

2-18 AirDefense Mobile User Guide

Chart

Dropdown Menus X X X

X X

To rearrange a view, you can drag and drop charts to another location. To remove a chart, click the Remove buttonâ&#x20AC;&#x201C;

associated with the chart.

Once you have customized the display to fit your needs, click the Save Changes button to save your arrangement. The customized view is saved on your laptop. Now, whenever you access AirDefense Mobile, you can access your customized arrangement. You can change the name of a view by clicking the Rename button. Just type in the new name and click OK. This allows you to give a view a more descriptive name if you changed the view significantly. To return a view to the original factory default, click the Reset to Defaults button. To save a screen shot of the Data tab in a PDF file, click the Save Dashboard button. The Save Dashboard window displays.

To save the file on your laptop: 1. Enter the name of the PDF author (optional). 2. Click the Select Destination buttonâ&#x20AC;&#x201C;

3. Navigate to the folder (directory) where you want to save the file. 4. Enter a filename and then click Select. The filename along with the path displays in the File field. 5. Click OK. A snapshot of all the visible charts is taken. Once the file is saved, you can view it later using Acrobat Reader.

Live Monitoring 2-19

2.5 Connections Tab The Connections tab displays the relationships (connections) between devices that have been seen during the Live Monitoring session.

You have the option of displaying devices with broadcast frames, devices with multicast frames, or both. Just select the checkbox for the option you want. The Data Frames and Bytes fields display the count of data frames and bytes. If more than 50,000 frames have been captured during the Live Monitoring session, only the most recent 50,000 frames are displayed. Devices are listed in three columns: Wireless (wireless devices), BSSs and Wired (wired devices). Device columns may be disabled or re-enabled by using the hideâ&#x20AC;&#x201C; /showâ&#x20AC;&#x201C; button next to the column name. For example, if the BSSs column is hidden, then connections will be shown directly from the source to the destination without the BSS in the middle. A connection is defined as a set of devices referenced by a single data frame. Typically, a connection will involve three devices (source, destination, and BSS); but, in some cases may involve four devices (wireless bridging). A line is defined as a link between two devices. Each connection is made up of multiple lines and each line may be part of multiple connections. The intensity and Z-order (whether a line is on top or bottom) of a line is based on the number of frames between the two devices.

2-20 AirDefense Mobile User Guide

Clicking on a device selects a connection involving that device. The devices and lines involved in the connection will be highlighted.

If you continue clicking on the device, the graph will cycle through the connections involving the selected device. Buttons are also provided to cycle through the connections. The Data Frames and Bytes fields will only show the data corresponding to the selected connection.

Live Monitoring 2-21

Right-clicking on a known device reveals a menu with the following options: • Configured States—Allows you to change the device state to authorized, unauthorized, or ignored. • Properties—Displays a Properties window which supplies property information about the device.

The editable fields are Name, Description, and Classification. You can add or change the name/ description of the device. You can also change the device classification to authorized, unauthorized, or ignored. If you make any changes, click OK to save them. An Observed Data table is included to display more information about the device, such as:  MAC address  Vendor name  Device name  Channel number  Channel extension  Service Set Identifier (SSID)  Time the device was first seen  Time the device was last seen  Number of frames  Number of bytes  Authentication used  Encryption method  Protocol used  Signal strength. • Copy MAC—Copies the MAC address of the selected device. • Locate MAC—Opens a Tracking window that helps you locate the selected device.

2-22 AirDefense Mobile User Guide

2.6 Devices Tab The Devices tab displays the devices that have been seen during a Live Monitoring session in tabular form.

If more than 50,000 frames have been captured during the live monitoring session, only the most recent 50,000 frames are displayed. You may choose to show all devices, only BSSs or only Wireless. Just select the appropriate radio button. The Devices table displays the following information: Column

Description

Device

Lists the different devices that have been seen during the Live Monitoring session.

MAC Address

Displays the MAC address of the seen device.

SSID

Lists the Service Set Identifiers, a 32- character unique identifier attached to the header of packets sent over a WLAN that acts as a password when a mobile device tries to connect to the BSS (Basic Service Set) and are the logical groups that Access Points belong.

Channel

Lists the WLAN channel that the device is operating on.

Channel Extension

Displays the WLAN channel extension that the devices is using.

Signal (dBm)

Lists the device's signal strength connectivity on the WLAN.

Frames

Displays number the frames, which are the actual packets of 802.11 protocol, that have been observed by the AirDefense sensor for the given device.

Bytes

Displays the byte count seen by the device.

First Seen

Displays the time and date the device was first seen.

Last Seen

Displays the time and date the device was last seen.

Live Monitoring 2-23

Column

Description

WEP IVs

Displays the number of unique WEP IVs seen by the device.

Authentication

Displays the authentication method used to connect to the device.

Encryption

Displays the encryption method used for communications.

Column display and arrangement can be customized as follows: â&#x20AC;˘ Hide or un-hide a category by right-clicking in the column heading area, and unchecking or checking the checkbox for a category (see below).

â&#x20AC;˘ Rearrange columns by clicking on a column heading and dragging it to a new position.

2-24 AirDefense Mobile User Guide

The fields are Name, Description, and Classification. You can add or change the name/description of the device. You can also change the device classification to authorized, unauthorized, or ignored. If you make any changes, click OK to save them. An Observed Data table is included to display more information about the device, such as:  MAC address  Vendor name  Device name  Channel number  Channel extension  Service Set Identifier (SSID)  Time the device was first seen  Time the device was last seen  Number of frames  Number of bytes  Authentication used  Encryption method  Protocol used  Signal strength. • Copy MAC —Copies the MAC address of the selected device. • Locate Device—Opens a Tracking window that helps you locate the selected device.

Live Monitoring 2-25

2.7 Frames Tab The Frames tab displays the frames that were captured during a Live Monitoring session. The first time you access the Frames tab the table view is displayed.

You can switch to the frames view by clicking the Frames View buttonâ&#x20AC;&#x201C;

Click the Table View buttonâ&#x20AC;&#x201C;

to switch back to the table view.

2-26 AirDefense Mobile User Guide

If more than 50,000 frames have been captured during the live monitoring session, only the most recent 50,000 frames are displayed. The Frames tab is divided into three areas: • Table or Frames (located on top) • Hex values for a selected frame (located on bottom left) • Decodes for a selected frame (located on bottom right).

2.7.1 Table View A frame is selected by clicking anywhere on the frame row. When selected, the frame row is highlighted. The frames table displays the following information: Column

Description

Time

Displays the time the frame was seen.

Source

Lists the device where the frame originated.

Destination

Lists the device where the frame was sent.

BSSID

Displays the Basic Service Set Identifier.

Transmitter

Lists the device that transmitted the frame.

Receiver

Lists the device that actually received the frame.

Address 1

Lists the first address in the frame.

Addrees 2

Lists the second address in the frame.

Address 3

Lists the third address in the frame.

Address 4

Lists the fourth address in the frame.

Channel

Lists the WLAN channel that the device is operating on.

Channel Extension

Displays the WLAN channel extension that the devices is using.

Rate

Displays the data rate (in Mbps) being used by the device that sent the packet.

Signal (dBm)

Lists the device's signal strength connectivity on the WLAN.

Size

Displays the size of the frame.

802.11 Type

Displays the 802.11 protocol type used in the frame.

Protocol

Displays the protocol type used in the frame.

Live Monitoring 2-27

â&#x20AC;˘ Rearrange columns by clicking on a column heading and dragging it to a new position. When a frame is selected (highlighted), the frame data is shown in the hex values and decodes areas. The decodes area shows the 802.11 interpretation of the frame data in a tree structure. The hex values area and decodes area are linked so that selections in one area will follow the selections in the other. If you right-click a frame, you can access Apply Filter.

Apply Filter adds filter information to the Frame Filter using a combination of the item clicked in the frame and the column header. For example, clicking on a MAC address in the BSSID column will filter all frames with that MAC address as the BSSID. This works for all columns except Channel Extension, Signal (dBm), and Size. NOTE: You can view the added filter information by accessing the Frame Filter. If a survey is being visualized, a Locate Marker option is also displayed when you right-click a frame.

Selecting Locate Marker opens the Survey tab and points to the marker position where the frame was captured.

2-28 AirDefense Mobile User Guide

2.7.2 Frames View The devices from which the frames were captured are displayed across the top of the tab. A frame is selected by clicking anywhere on the line under the frame name. When selected, the frame is highlighted in blue. When a frame is selected (highlighted), the frame data is shown in the hex values and decodes areas. The decodes area shows the 802.11 interpretation of the frame data in a tree structure. The hex values area and decodes area are linked so that selections in one area will follow the selections in the other.

2.8 Survey Tab The Survey feature of Mobile 6 is used to record 802.11 measurement data and display that data as a heat map over an image representing a floor in a building. The Survey tab is where you set up and conduct site surveys. NOTE: You must possess a Mobile Survey license to have access to the Survey tab.

Live Monitoring 2-29

Once data has been collected, you can visualize the data as a heat map in one of the following modes selected from the Visualization Modes dropdown menu: Visualization Mode

Description

Coverage by signal strength

This visualization mode allows you to view areas emphasizing your signal strengths, allowing you to identify your strong and weak areas of coverage

Coverage by channel

This visualization mode allows you to view areas of coverage colored by the best serving channel (20 or 40 MHz width) to that region.

SNR (signal-to-noise ratio)

This visualization mode allows you to view the best SNR from devices in the location.

Noise

This visualization mode allows you to view regions where a certain level of noise occurs.

Data Rate

This visualization mode shows the data rates that a client actually uses while transmitting and receiving data packets when associated with an AP.

Hybrid Network Overlap

This visualization mode allows you to view the deployment type of the entire network. This visual-ization shows areas of coverage where the clients will be served only by 802.11a/b/g (Legacy) APs, only 802.11n APs (High Throughput) APs or all 802.11a/b/ g/n (Hybrid) APs.

Sevice Count

This visualization mode allows you to view the number of BSSs servicing a particular location on the heat map. If the number exceeds 10 at any location, that location will be a single color on the heat map.

The Survey feature of Mobile 6 also gives you a Pass/Fail status for the following applications: • Basic WiFi Connectivity • Location Tracking • Mobile Handhelds • Video Surveillance • Wireless VoIP Handsets. The applications are also selected from the Visualization Modes dropdown menu. You can view the Pass/ Fail status by accessing the Legends.

2.8.1 Creating Floor Plans The floor plan represents the floors in a building. It contains the building, the floors, images of the floors, and devices on the floors. You must have a floor plan to conduct a site survey. It is used to mark your path during the survey. Here are the steps to create a floor plan: 1. Upload an image that represents the layout of the first floor. 2. Add additional floors until all floors in the building are in the floor plan. 3. Add devices to each floor that represent actual devices on the floors.

2-30 AirDefense Mobile User Guide

2.8.1.1 Upload Image When Mobile 6 is first accessed, the floor plan is empty. You must add a floor plan, to use the Survey feature.

To add a floor plan: 1. Click the Building Wizard button, click the Add a Floor Plan link, or select File > New.

Live Monitoring 2-31

2. Enter a floor name and then click the browse (…) button to locate/specify an image.

You can add images in any of the following formats: • Bitmap/BMP • JPEG/JPG • GIF • PNG 3. Navigate to the image file, select it, and then click Open. The Image field displays the image file name. NOTE: If you know the ceiling height of your location, you may enter it now in meters or feet. If not, you can specify this parameter later. 4. Click Next. A window displays stating that floor was added successfully.

2-32 AirDefense Mobile User Guide

5. Click Finish. The floor plan is created with an image.

6. Once the image is added to the floor plan, the cursor should now be a crosshair cursor. You can scale the image later. Click the <Esc> key to exit from the scaling mode or scale the image now as follows: a. Left-click a point on the image while continuing to hold down the mouse button. b. Drag the mouse to another point on the image and then release the mouse button. The following window displays:

c. Enter the distance between the two points in meters, centimeters, feet or inches. d. Click OK. The image is scaled using to the value that you supplied.

2.8.1.2 Add Additional Flors If your building has more than one floor, you will want to add the additional floors. The Building Wizard is used to add additional floors. The instructions for adding additional floors are very similar to adding the first floor. 1. Click the Building Wizard button.

Live Monitoring 2-33

2. Select the Add option and then click Next. NOTE: Floors are added in sequence; therefore, the floor number will be the next floor in line. 3. Enter a floor name in the Floor Name field. 4. Use the browse (...) button to specify an image for the floor. 5. After the image name is added to the Floor Name field, click Next. A message should display indicating that the floor was added successfully. 6. Click Finish. 7. Scale the floor the same way you did when you added the first floor. 8. Click OK. 9. To add additional floors, repeat Steps 1 to 8 until done.

2.8.1.3 Add Devices Mobile 6 allows you to place devices on your floor plan so that you can have a visual representation of where the devices in your location. The Add Device button is used to add a device one at a time. Once a device has been placed on a floor plan, you can: • Move it by clicking on it and dragging it to a new position. • Copy, cut and paste a device by right-clicking on the device and selecting the appropriate menu item. • Remove a device from the floor plan. • You can rename it to give it a more descriptive name by right-clicking on the device and then selecting Rename AP from the popup menu. Just enter a new name when the Input window displays and click OK. • View and change the properties of a device by right-clicking on the device and selecting Edit AP BSS List from the popup menu.

2-34 AirDefense Mobile User Guide

To edit a parameter, double-click the parameter. If it is editable, the edit cursor displays so that you can make changes. After making a change, the <Tab> key must be pressed to retain the changes. If a parameter is uneditable, the parameter will just be highlighted.

2.8.2 Menus The Survey tab has two types of menus: dropdown menus and right-click menus. The dropdown menus are located at the top of the tab. The right-click menus can be accessed by right-clicking anywhere within the Survey tab.

2.8.2.1 Dropdown Menus The following four dropdown menus are available in the Survey tab: Menu

Description

Visualization Modes

Allows you to select a Visualization Mode (click link for list of modes) or view the Pass/Fail status for the following applications: • Basic WiFi Connectivity • Location Tracking • Mobile Handhelds • Video Surveillance • Wireless VoIP Handsets.

Data Files Selection

During visualization, the Data File filter contains a list of all known data files. All selected files are included in the heat map results. Unselected files are not included in the heat map results.

802.11 Protocol Selection

Allows you to select one of two 802.11 protocols to view in a heat map: 802.11b/ g/n or 802.11a/n.

Floor Selection

Allows you to change the floor in a multi-floor building.

Live Monitoring 2-35

2.8.2.2 Right-Click Menus The following four right-click menus are available in the Survey tab: Menu

Description

Scale/Align

Allows you to scale a floor, scale a floor with data and devices, align floors in a building, or scale all floors with data and devices. When conducting a scan, this menu is not available. When scaling a floor or a scaling a floor with data and devices, the cursor turns into a crosshair. Click your right mouse button to mark the first point and while continuing to hold the mouse button move the crosshair to a second point; release the mouse button to mark the second point. A Set Scale window displays where you can specify a distance in meters. When scaling all floors with data and devices, select two points on the floor where you know the actual physical distance. Only use this option if the images for all the floors are the same size. When aligning floors, clicking a point on the map makes that point the alignment reference point for that floor.

Marker Placement

Allows you to end a track, center on a marker, or remove the last placed marker as follows: • End Track—Ends the current track of bullets. When the next marker is placed, a new track is started. • Center on Marker—Centers the floor plan to the spot of the specified marker. When the next marker is placed, the image is adjusted to the centered marker. • Undo—Removes the last placed marker from the scan. The shortcut is <Ctrl-U>. This menu is only available during a scan.

Adjust Markers

Allows you to scale or move markers. This menu is available only while visualizing data and clicking a marker when a measurement run is selected. When scaling or moving markers, you must first select all markers by clicking once on any marker. Click Scale Markers to display a window where you can specify a size in meters. Click Move Markers to display a window that explains you must drag the markers to a new location. After clicking OK, drag the markers to a new location.

Device

Allows you to manipulate devices as follows: • Cut—Cuts a device from the floor plan to be pasted later. • Copy—Copies a device from the floor plan to be pasted later. • Remove—Deletes a device from the floor plan. • Rename AP—Renames it to give it a more descriptive name. • Edit AP BSS List—Views and edits the properties of a device. If a property is editable, the edit cursor displays so that you can make changes. If a parameter is uneditable, the parameter will just be highlighted.

2-36 AirDefense Mobile User Guide

2.8.3 Tools The following tools are available in the Survey tab: Visualize Data button—Displays the heat map of a site survey after a scan or after loading a project file. Also, loads all the frames that have been captured while conductng a survey. Building Wizard button—Accesses the Building Wizard where you can add an image to a floor plan. Zoom Slider—Increases/decreases the image size (down decreases size/up increases size). Short cuts are:

• Ctrl-+ to zoom in • Ctrl-- to zoom out • Using the mouse wheel to zoom in or out.

Pan Floor button—Allows you to move/reposition the image.

Print button—Prints the image along with the heat map and map legend.

Save As PDF button—Saves the image along with the heat map and map legend in a PDF file.

Scale Floor button—Allows you to scale a floor in your floor plan.

Add Device button—Adds a device to a floor plan. Once the device has been added, you can move, copy, or delete it. Hide Device Scan List button—Removes the Device Scan List from view. PgDn key will also collapse scan list. Show Device Scan List button—Displays the Device Scan List after it has been hidden. PgUp key will also show scan list. Show Legends button—Displays the available legends on the right side of the Mobile window. The legends are used to interpret the colors in a heat map. Hide Legends button—Removes the available legends from view.

2.8.4 Conducting a Site Survey Before conducting a site survey, you should develop a walk through strategy. Your walk through should follow a path that gives you the most data. Keep in mind where your devices are located. Determine the frequency of placing markers. Markers are used as data collection points.

Live Monitoring 2-37

Follow these steps to conduct a site survey: 1. Open or create a new project. 2. Proceed to the starting point of your walk through. 3. Click the Startâ&#x20AC;&#x201C;

button.

4. Click the left mouse button to place your first marker. NOTE: You can remove a marker by right-clicking your mouse and selecting Undo. Undo removes the previous segment placed between markers. 5. Walk through your site following your predetermined path. 6. As you are walking through your site, place more markers to collect data from the devices in your site. NOTE: You only need to add markers when turning corners. Intermediate markers are placed between the current marker and the last placed. Intermediate markers are generated by the Mobile, assuming that you have been moving in a straight line at a constant speed. Also, as you are walking through your site, the device table displays data for the devices that are currently visible. The lifetime of a device in this table is twice the scan cycle time from the last observation time. The device with the strongest signal is displayed first. 7. When you get to the end point of your walk through, click the Stopâ&#x20AC;&#x201C; ready for visualization.

button. Your project is then

2-38 AirDefense Mobile User Guide

2.8.5 Visualizing Survey Data After conducting a site survey, you will want to analyze the results. Click the Visualize Data button. A heat map is displayed representing the signal strengths of the devices and all frames are loaded in the workspace. Legends are provided to interpret the colors in the heat map. Use the collapsible panel to the right heat map to view the legend. NOTE: You can change the Visualization Mode using the dropdown menu.

When rolling your mouse cursor over the heat map, information about detected devices is displayed. This information includes: • The device name • The SSID the device was seen on • The channel the device was using • The extension channel a device was using • The RSSI value of the device • The noise generated by the device

Live Monitoring 2-39

â&#x20AC;˘ The data rate the device was observed using.

2-40 AirDefense Mobile User Guide

You can click on a data point (previously a marker) to display information in the Device table. The Device table lists devices that are detected when the marker was placed. The device with the strongest signal is listed first while the device with the weakest signal is listed last.

A quick and easy way to locate a frame is to access the Frame tab and right-click on a frame. A menu containing Locate Marker is displayed. Selecting Locate Marker will take you back to the Survey tab and highlight the marker where the frame was captured.

2.9 Frame Capture AirDefense Mobile with the Mobile Analysis license automatically saves session frame data in a temporary file. Also, if a survey project is open, frame data is automatically saved when the project is saved. You can save the temporary file to a permanent file on your laptop. To save a file, first stop the session (click Stop button or select Session > Stop) and then select File > Save to display the Save Frame Capture popup window.

To save the file on your laptop: 1. Click the Select Destination buttonâ&#x20AC;&#x201C;

2. Navigate to the folder (directory) where you want to save the file. 3. Type a filename and then click Select. The file name along with the path displays in the File field. 4. Click OK. Once the file is saved, you can view it using Frame Capture Analysis. You can access this feature from the File menu. Just select File > Open > Open Capture File to open the saved file.

Frame Capture Analysis 3.1 Chapter Contents This chapter includes the following topics: Topic

Page

Getting Started

3-1

Common Area

3-2

Tabs

3-4

3.2 Getting Started Frame Capture Analysis allows you to replay events that occurred during a Live Monitoring session. Before you can use Frame Capture Analysis, you must save a Live Monitoring session in a pcap file. This is done by selecting File > Save while in a Live Monitoring session. (Refer to Frame Capture under the Live Monitoring chapter.) To start a Frame Capture Analysis session: 1. Select File > Open > Open Capture File from AirDefense Mobile. The Open Frame Capture popup window displays.

2. Click the Select Location buttonâ&#x20AC;&#x201C;

for the Local File option.

3. Navigate to the folder (directory) where the file was saved. 4. Select the file and then click Select. The filename along with the path name displays in the File field.

3-2 AirDefense Mobile User Guide

5. Click OK. The capture file is opened for you to analyze.

3.3 Common Area The common area holds the menus, buttons and time window that are common to Frame Capture Analysis. If more than 50,000 frames have been capture, a Loaded Frames slide bar is also displayed. The common area is located at the top of the window.

Frame Capture Analysis 3-3

3.3.1 Menus Menu

Option

Description

File

Open

Opens another captured file.

Edit Filters

Opens the Frame Filter popup window where you can set options to filter data. (See Frame Filter topic for more information.)

Start Capture

Accesses the main Mobile window so that you can start a new session.

Exits the Frame Capture Analysis and closes the window.

3.3.2 Buttons Button

Description Opens the Frame Filter popup window. where you can set options to filter data. (See Frame Filter topic for more information.)

3.3.3 Dropdown Menus Dropdown Menu

Description

Frame Selection

Acts as a quick filter to display only frames for the selected frame type. To view all types, select All Frames.

Device Selection

Acts as a quick filter to display only frames for the selected device. To view all devices, select All Devices.

3.3.4 Time Window The Time window shows a frame count chart over time for the entire capture file. You can adjust the time window by moving the sliders (on either end of the time window). This allows you to view and analyze frame data for the highlighted time range.

3-4 AirDefense Mobile User Guide

3.3.5 Loaded Frames Slide Bar If a capture file contains more than 50,000 frames, only the first 50,000 frames will be loaded. A Loaded Frames slide bar is added that allows you to load the other frames. Just move the slide bar to load another 50,000 frames.

3.4 Tabs Frame Capture Analysis uses the same tabs as Live Monitoring. • Data tab provides the same features for Frame Capture Analysis as Live Monitoring. • Connections tab shows the relationships between devices within the Frame Capture Analysis time window. • Devices tab shows the devices within the Frame Capture Analysis time window. • Frames tab shows the frames within the Frame Capture Analysis time window. For more information, refer to the appropriate topic under Live Monitoring.

Spectrum Analysis 4.1 Chapter Contents This chapter includes the following topics: Topic

Page

Overview

4-2

Spectrum Settings

4-3

Spectrogram

4-3

Interference Sources

4-4

Save Spectrum Data

4-5

4-2 AirDefense Mobile User Guide

4.2 Overview NOTE: You cannot access Spectrum Analysis if you are using a USB adapter. Spectrum Analysis gives you a tool to identify and locate interference sources on your wireless network. Spectrum Analysis is conducted in the Spectrum View window. You can access the Spectrum View window by clicking the Spectrum Analysis button or by selecting Session > Spectrum Analysis.

Spectrum Analysis starts automatically when the Spectrum View window is opened. You can stop a scan by clicking the Stop Scan buttonâ&#x20AC;&#x201C; or selecting Scan > Stop Scan from the menus. A scan can be restarted by clicking the Start Scan buttonâ&#x20AC;&#x201C; or selecting Scan > Start Scan from the menus. A counter is displayed next to the Stop Scan button to show how long the scan has been running. There are two scanning modes: Full Scan and Interference Scan. Full Scan uses 14 channels in the 2.4GHz band (2412 - 2484 MHz) and 241 channels in the 5GHz band (4900 MHz - 6100 MHz at interval of 5 MHz) with a dwell time of 50 ms per channel. Interference Scan uses 5 channels in the 2.4GHz band and 3 channels in the 5GHz band with a dwell time of 500 ms per channel. Interference Scan supports classification for all interference sources. To select a mode, select the appropriate radio button or select a mode from the Scan menu. Click the Windows Close button or select File > Close to exit Spectrum View.

Spectrum Analysis 4-3

4.3 Spectrum Settings Spectrum View lets you adjust the pulse definition via the Spectrum Settings window. To access the Spectrum Settings, select File > Settings.

As you can see, there are two fields for pulse definition: Threshold and Width. You can adjust the pulse threshold by typing in a new value in dBm. You can adjust the pulse width by typing in a new value in microseconds. Click OK to set the new values and close the window.

4.4 Spectrogram The spectrogram shows the average power level measured at each of the frequencies in the scan settings over a period of time. The graph is cleared when a scan starts and updates regularly as data becomes available during the scan. When a scan starts, data starts showing in the right side of the graph. As new data is scanned, the older data moves to the left. Once the graph is full, a horizontal scrollbar is activated. You can display the frequency and power value by moving the cursor over points in the graph. The highlighted cell is displayed in crosshairs that pinpoints the cell's position on the X and Y axes of the graph. The Duty Cycle chart shows the duty cycle values for the most recent time slice and an average of the duty cycles across all time slices. When the cursor is placed over the Duty Cycle chart, the frequency and duty value is highlighted and displayed. Also, the status bar displays the frequency, duty value, average power, and average pulse power. You can adjust the size of the Spectrogram and Duty Cycle chart by clicking and dragging the divider (left or right) between them. The size of the charts may be adjusted along the X axis by dragging a divider which is shown between the spectrogram and the duty cycle chart.

4-4 AirDefense Mobile User Guide

You can display more details about a data point by clicking the View Data Point Details–

button.

4.5 Interference Sources 802.11 devices operate in 2.4GHz range for b/g and 5GHz range for a-channels. This makes them very subjective to interference from other devices utilizing the same frequency. To help identify potential interference sources, AirDefense Mobile detects the following four types of interference sources: • Microwave Oven • Continuous Wave • Frequency Hopping • Bluetooth These interference sources are displayed at the bottom of the Spectrum View window in a bar graph as seen over time. Clicking on a bar in the graph highlights all the frequencies that are being affected by that specific interference source. Details about the frequency and signal strength are displayed when you move your cursor over a frequency cell. Each time a scan is started, interference information is updated.

Spectrum Analysis 4-5

4.6 Save Spectrum Data Once you are done collecting spectrum data, you can save it to an ADSA file to view later. To save a file, first stop the scan (click Stop button or select Scan > Stop) and then select File > Save to display the Save Spectrum Data popup window.

To save the file on your laptop: 1. Click the Select Destination buttonâ&#x20AC;&#x201C;

2. Navigate to the folder (directory) where you want to save the file. 3. Type a filename and then click Select. The file name along with the path displays in the File field. 4. Click OK. Once the file is saved, you can view it later. You can access this feature from the File menu. Just select File > Open > Open Spectrum Data to open the saved file. You can also open an ADSA file by double-clicking the file.

4-6 AirDefense Mobile User Guide

While viewing saved spectrum data: • You can only view past events. • All window controls work the same as in Spectrum View. The File menu can be used to: • Close the saved file. • Access the main Mobile window to start a new Live Monitoring session.

Locate Device 5.1 Chapter Contents This chapter includes the following topics: Topic

Page

Overview

5-1

Using Locate Device

5-2

5.2 Overview Locate Device enables you to find any device being detected by AirDefense Mobile within the broadcast range of your laptop. It is only available when local scanning is enabled. Locate Device gives you real time device tracking based on RSSI values observed from a device. Signal strength is used to gauge the distance between a laptop with AirDefense Mobile and the tracked device.

5-2 AirDefense Mobile User Guide

5.3 Using Locate Device To use Locate Device, you must first start a Live Monitoring session and access the Devices tab or Connections tab. Then, right-click on the device you want to locate and select Locate Device.

A Tracking window is displayed that you can use to locate the device.

Locate Device 5-3

The Tracking window displays the device's signal strength (in dBm) and signal noise (in dBm). The closer you are to the device the stronger the signal strength. The further away you are the weaker the signal strength. Hovering over a point on the graph (signal strength or noise) displays the date and time at that point along with the exact signal strength or signal noise of the device. You can save the tracking data in a PCAP file by selecting File > Save. The Save Tracking File window displays.

To save the file on your laptop: 1. Click the Select Destination buttonâ&#x20AC;&#x201C;

2. Navigate to the folder (directory) where you want to save the file. 3. Type a filename and then click Select. The file name along with the path displays in the File field. 4. Click OK. Once the file is saved, you can view it later by selecting File > Open > Open Tracking File to open the saved file. To exit the Tracking window, select File > Close. When exiting, if you have not saved the tracking data, AirDefense Mobile will prompt you to save the tracking data. Click Yes to save the tracking data.

5-4 AirDefense Mobile User Guide

Index

Numerics

802.11 Protocol Selection. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-34

floor plan . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2-29 floor plan image types . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2-31 Floor Selection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2-34 frame capture . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2-40 Frame Capture Analysis . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .3-1 Frame Capture Analysis common area . . . . . . . . . . . . . . . . . . . . . . .3-2 Frame Capture Analysis tabs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .3-4 Frames tab. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2-25 Frames View, Frame tab . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2-25 Full Scan . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .4-2

A add a floor plan. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-30 add additional floors. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-32 Add Device . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-33, 2-36 add devices to your floor plan . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-33 additional resources . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-i align floor . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-35 analyze captured file. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-1 analyze real-time data traffic flow . . . . . . . . . . . . . . . . . . . . . . . . . . 2-2 analyze survey results. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-38 automatic frame captures. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-40 Available Charts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-14 Available Charts description. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-15 Available Charts dropdown menus. . . . . . . . . . . . . . . . . . . . . . . . . 2-16

B Building Wizard. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-30, 2-32 Building Wizard button . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-36

C Center on Marker . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-35 Channel Settings. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-4 common area, Frame Capture Analysis . . . . . . . . . . . . . . . . . . . . . . 3-2 common area, Live Monitoring. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-2 conducting a site survey . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-36 Connections tab . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-19 Copy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-35 creating floor plans. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-29 Cut. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-35

D Data Files Selection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-34 Data tab . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-13 Devices tab . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-22 Devices table . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-22 dropdown menus . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-34

E Edit AP BSS List . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-33, 2-35 End Track. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-35

G Getting Started . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1-2

H Hide Device Scan List . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2-36 Hide Legends. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2-36

I Interference Scan . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .4-2 Interference Sources. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .4-4

L Live Monitoring . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-1, 2-2 Live Monitoring Common Area . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2-2 Loaded Frames Slide Bar . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .3-4 Locate Device . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-1, 5-2

M Mobile Survey license. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2-28 monitor real-time data traffic flow . . . . . . . . . . . . . . . . . . . . . . . . . .2-2 Move Markers. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2-35

N network adapter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1-2

O Open Frame Capture window . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .3-1 open spectrum data . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .4-5 open tracking file . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .5-3

IN-2

AirDefense Mobile User Guide

P Pan Floor . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-36 place devices on your floor plan. . . . . . . . . . . . . . . . . . . . . . . . . . . 2-33 Print. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-36 Properties window, Connections tab . . . . . . . . . . . . . . . . . . . . . . . 2-21 Properties window, Devices tab. . . . . . . . . . . . . . . . . . . . . . . . . . . 2-24

R Remove . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-35 Rename AP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-33, 2-35 right-click menus. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-35

S Save As PDF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-36 Save Frame Capture window . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-40 save spectrum data. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-5 save the tracking data . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-3 scale a floor . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-35 Scale Floor . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-36 scale floor plan image . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-32 Scale Markers. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-35 Set Scale. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-35 Show Device Scan List . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-36 Show Legends. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-36 spectrogram . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-3 Spectrum Analysis . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-1, 4-2 Spectrum Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-3 Spectrum View . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-2

Start button, Live Monitoring . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2-2 Start Scan . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .4-2 Stop Scan . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .4-2 Survey dropdown menus. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2-34 Survey menus . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2-34 Survey right-click menus. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2-35 Survey tab . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2-28 Survey tools. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2-36

T table view, Frames tab . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2-25 tabs, Frame Capture Analysis . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .3-4 Time Window . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .3-3 tools. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2-36 Tracking window. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .5-2

U Undo . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2-35 upload floor plan image . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2-30

V Visualization Modes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2-34 Visualize Data button . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2-36 Visualizing Survey Data . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2-38

Z Zoom Slider . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2-36

MOTOROLA SOLUTIONS, INC. 1303 E. ALGONQUIN ROAD SCHAUMBURG, IL 60196 http://www.motorolasolutions.com 72E-151876-01 Rev A - May 2011