In sniffer mode, an Access Point (AP) captures wireless traffic on a wireless network and forwards that traffic to a PC running a packet analyzer (e.g., Wireshark). This mode is specifically designed for network monitoring and troubleshooting, as it allows you to capture raw packets from the air to analyze them for issues such as network performance or security problems.
Hereâs why the other options are incorrect:
A. bridge: In bridge mode, the AP connects two networks, typically wired and wireless, to bridge them together. It does not capture traffic for analysis.
B. monitor: While monitor mode allows an AP to listen to all wireless traffic on the channel it is tuned to (without joining the network), it does not specifically forward that traffic to a packet analyzer. Monitor mode is used more for passive scanning and monitoring but isn't intended for forwarding packets to a PC for analysis.
C. rouge detector: Rogue detection mode is used to detect unauthorized or rogue APs on the network. Itâs not used for capturing and forwarding traffic to an analyzer.
Itâs D
The controller enables you to configure an access point as a network âsnifferâ, which captures and forwards all the packets on a particular channel to a remote machine that runs packet analyzer software.
https://www.cisco.com/c/en/us/td/docs/wireless/controller/9800/17-2/config-guide/b_wl_17_2_cg/sniffer_mode.pdf
The AP mode used for capturing wireless traffic and forwarding that traffic to a PC running a packet analyzer is D. sniffer.
In sniffer mode, the AP captures Layer 2 wireless frames and sends them to the packet analyzer program, such as Wireshark, where they can be saved and examined
Monitor Mode
The monitor AP mode doesnât transmit at all. It doesnât broadcast an SSID. However, it acts as a dedicated sensor to monitor and detect the WiFi channel for IDS events, rogue access points, and it also determines the position of wireless stations via location-based services.
Sniffer Mode
Access points in sniffer AP mode act as a dedicated 802.11 wireless traffic receiver. The traffic is then forwarded to a machine running a network analyzer software such as Wireshark or OmniPeek for storage and further analysis. Sniffer AP mode wonât broadcast an SSID, and clients canât connect to it, but it is helpful in troubleshooting on remote sites.
Monitor: The AP does not transmit at all, but its receiver is enabled to act as a dedicated sensor. The AP checks for IDS events, detects rogue access points, and determines the position of stations through location-based services.
Sniffer: An AP dedicates its radios to receiving 802.11 traffic from other sources, much like a sniffer or packet capture device. The captured traffic is then forwarded to a PC run ning network analyzer software such as Wildpackets OmniPeek or WireShark, where it can be analyzed further.
D is True
The correct answer is B. monitor.
In AP (Access Point) mode, a monitor is used to capture wireless traffic and forward it to a PC that is running a packet analyzer. This allows for the analysis and monitoring of wireless network traffic.
A bridge can connect two or more local networks together, but it does not specifically capture and forward traffic for analysis.
A rogue detector is a feature or tool used to identify unauthorized or rogue access points in a wireless network. It does not capture and forward traffic for analysis.
A sniffer is another term for a packet analyzer or network analyzer, which is the tool that is run on a PC to capture and analyze network traffic. It does not specifically refer to the AP mode for capturing and forwarding traffic.
Sniffer: An AP dedicates its radios to receiving 802.11 traffic from other sources, much
like a sniffer or packet capture device. The captured traffic is then forwarded to a PC running
network analyzer software such as Wildpackets OmniPeek or WireShark, where it
can be analyzed further
The controller enables you to configure an access point as a network âsnifferâ, which captures and forwards all the packets on a particular channel to a remote machine that runs packet analyzer software. These packets contain information on time stamps, signal strength, packet sizes, and so on.
upvoted 4 times
...
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Grenadate
2Â weeks, 1Â day agoGrenadate
2Â weeks, 1Â day ago[Removed]
3Â months, 4Â weeks agolmmujsi
4Â months, 1Â week ago86a50a6
4Â months, 2Â weeks agoStarlord2535
5Â months, 1Â week agoStarlord2535
5Â months, 1Â week agoa67c04a
6Â months, 1Â week agoIyellalott
6Â months, 1Â week ago[Removed]
6Â months, 3Â weeks agoAA4534
7Â months, 1Â week agoAA4534
7Â months, 1Â week agoCCNA_slayer
8Â months, 1Â week ago[Removed]
9Â months, 3Â weeks agognaix
9Â months, 3Â weeks agopartali
9Â months, 3Â weeks ago