WLANmonitor organizes any rogue clients into the following pre-defined (sub) groups:
- All clients: Contains the overview of all discovered clients and thus represents the superset of all subsequent groups. The clients are colored according to their grouping.
- New clients: Contains new unknown clients. The relevant clients are yellow in color.
- Rogue clients: Contains clients that are identified as rogue and require immediate observation. The relevant clients are red in color.
- Unknown clients: Contains clients that require further investigation. The relevant clients are gray in color.
- Known clients: Contains clients that pose no risk. The relevant clients are gray in color.
- Own clients: Contains new own clients associated with access points being observed by the WLANmonitor. The relevant clients are green in color.
Within each group, WLANmonitor displays the following information about the rogue clients:
- Time of first and last detection
- MAC address of the client
- Name of the WLAN network (SSID)
When you click a list entry, WLANmonitor displays the following details:
- IP address of the access point that saw the client
- Time when last seen
- WLAN interface used to discover the client
- Signal strength with which the APs received the WLAN network
You have the option to move the found clients into an appropriate group depending on their status. You can set up your own network groups within the individual groups by using the context menu (right mouse button), with the exception of the group All clients.
