User`s guide

Capture to…

This option allows you to define where on the pocket pc you want to save the capture file.

Like the 'Save Packets to..' option, this will help you control where to store data to avoid

overflowing the pocket pc's device.

Start/Stop Capture

In addition to the Start/Stop buttons on the Menu bar, you can also start and stop the

program from the Tools menu.

3.1.6 Filtering

Airscanner Mobile Sniffer™ includes a simple filter that will allow you to define the data

collected. This will reduce file sizes and will help narrow down the collection to just the data

that is of interest. Since you can easily import the collected data files into Ethereal, enhanced

filtering is not necessary.

The filtering page allows you to define a maximum of two filters. The filters are defined as

the following:

• Protocol: TCP, UDP

• MAC Address: The hardware address of a WNIC. Existing MACs will be displayed in

the capture window. This can help you collect data from a particular client, regardless of

their IP address.

• IP Address: The IP address assigned to the WNIC. Existing IPs will be displayed in the

capture window. This can help you target a particular client from which to collect data.

• Port: The port to which data is entering or leaving. This can help you narrow down

traffic to a particular service.

• Port Number: The port number is important because it often indicates the reason for the

traffic. For example, port 80 is the default port used for HTTP traffic.