Airscanner Mobile Sniffer - MikesHardware.com

(C) 2003 Airscanner Corp. http://www.airscanner.com
Capture to…
This option allows you to define where on the pocket pc you want to save the capture file.
Like the 'Save Packets to..' option, this will help you control where to store data to avoid
overflowing the pocket pc's device.
Start/Stop Capture
In addition to the Start/Stop buttons on the Menu bar, you can also start and stop the
program from the Tools menu.
3.1.6 Filtering
Airscanner Mobile Sniffer includes a simple filter that will allow you to define the data
collected. This will reduce file sizes and will help narrow down the collection to just the data
that is of interest. Since you can easily import the collected data files into Ethereal, enhanced
filtering is not necessary.
The filtering page allows you to define a maximum of two filters. The filters are defined as
the following:
• Protocol: TCP, UDP
• MAC Address: The hardware address of a WNIC. Existing MACs will be displayed in
the capture window. This can help you collect data from a particular client, regardless of
their IP address.
• IP Address: The IP address assigned to the WNIC. Existing IPs will be displayed in the
capture window. This can help you target a particular client from which to collect data.
• Port: The port to which data is entering or leaving. This can help you narrow down
traffic to a particular service.
• Port Number: The port number is important because it often indicates the reason for the
traffic. For example, port 80 is the default port used for HTTP traffic.