Vendor ID policy - Documentation

Omnipeek User Guide

Introduction
Using Capture Engines with Omnipeek
The Capture Window
Dashboards
Viewing and Decoding Packets
Creating and Using Filters
Post-capture Analysis
Expert Analysis
- About Expert analysis
- Expert views and tabs
- Configuring Expert views
- Expert EventFinder
- Flow Visualizer
- Network policy settings
  Vendor ID policy Channel policy ESSID policy WLAN encryption policy WLAN authentication policy
Multi-Segment Analysis
Web Analysis
Voice & Video Analysis
Displaying and Reporting Statistics
Using the Peer Map
Creating Graphs
Setting Alarms and Triggers
Sending Notifications
Using the Name Table
Viewing Logs and Events
Applying Analysis Modules
Configuring Options
Capturing Data for Wireless Analysis
Configuring capture adapters
Omnipeek Remote Assistant
Global Positioning System
Menus and Keyboard Shortcuts
Reference
Analysis Modules
Expert Events
Real-World Security Investigations
Connecting to a Capture Engine

Omnipeek: Omnipeek User GuideDownload PDF

Expert Analysis : Network policy settings : Vendor ID policy

Vendor ID policy

The Vendor ID policy dialog lets you set a policy based on the MAC addresses of 802.11 WLAN adapters seen by the Expert.

Use the table to create a list of MAC addresses (or blocks of MAC addresses, each defined by its vendor ID), then use the buttons at the top of the table to tell the Expert to Accept Matching, or Reject Matching MAC addresses.

You can use the asterisk character (*) as a wildcard to represent any byte of the 6-byte MAC address. The Name table ships with a current list of vendor IDs, associating each block of MAC addresses with a particular card vendor name.

NOTE: Click Help on the dialog to learn about the available options and settings.

Network policy settings Channel policy