Documentation
OmnipeekOmnipeek User GuideDownload PDF
Reference : WLAN statistics columns
WLAN statistics columns
The following table describes all of the columns available in the WLAN view of a capture window.
Data rates are dependent on physical layer implementations, and different data rate columns are available, depending on the standards supported by the selected adapter.
In 802.11 WLANs, every packet begins with a preamble and PLCP header sent at the lowest common data rate. The body of the packet can then be sent at any of the supported data rates. It is the data rate at which the body of the packet is sent that is reported in data rate columns.
Column
Description
Node
The Node column in the WLAN view displays detected nodes in a nested hierarchy of stations (STA) under BSSIDs, under ESSIDs.
ESSID
The ESSID for this node. When ESSIDs are in use, access points (or equivalents) will announce their ESSID in Beacon packets and/or Probe Response packets.
Type
The type of node. This is either the identifying string of an extended service set (ESSID), an access point (AP), an ordinary station temporarily acting as the base station for an ad hoc group (Ad Hoc), or a Station (STA). Broadcast and multicast destination addresses which cannot be identified as belonging to a particular node are identified by the Admin label. Unknown node types will show a blank in this field.
Channel
The channel on which Omnipeek was listening when the most recent packet for this node was captured. During a channel scan, this value may appear anomalous, as the same node may be detected on multiple channels but only the most recent will show in this column.
 
Important: The channel shown for Nodes identified as an access point (AP) will be the channel on which that AP is broadcasting, as identified in the AP’s Beacon packets and Probe Responses.
Frequency
The frequency in MHz of the traffic captured on a specific channel.
Band
The identifying band of the traffic captured on a specific channel such as a/b/g/n.
Association Strength
The WLAN view ranges each STA under the AP (or equivalent) with which it most recently communicated. The Association Strength parameter allows you to distinguish between nodes that are simply probing (searching for an AP with which to associate) and those that are truly associated (those that have completed the association process with a particular AP). Nodes that are truly associated with their AP show an Association Strength of Strong. Those that are not associated, but have merely communicated (typically with a probe packet) show an Association Strength of Weak.
Authentication
Shows the most recently seen form of authentication used by this node to connect with its BSSID. Example values include EAPTLS, LEAP, and PEAP. Note that Omnipeek does not monitor the authentication state of all nodes, but only registers the most recent authentication. Also, some authentication methods are encrypted in a way that prevents identification of the authentication method.
Encryption
Shows the most recently seen form of encryption used by this node to communicate with its BSSID. Example values include CKIP, TKIP, WEP and CCMP. Note that Omnipeek does not monitor the encryption state of all connections, but only registers the most recent method seen from each node.
Trust
Shows the user-assigned trust setting from the Name Table for this BSSID or STA. Right-click any node to change this property. See Trusted, known, and unknown nodes.
Signal Strength columns
Columns showing statistics related to signal strength reported with each packet, expressed either as a percentage or in decibel milliWatts (dBm).
 
Cur. = Most recently reported signal strength on the channel.
 
Min. = Minimum signal strength reported on this channel from the time the statistics count was created until the most recent update.
 
Max. = Maximum signal strength reported on this channel from the time the statistics count was created until the most recent update.
Noise columns
Columns showing statistics related to noise reported with each packet, expressed either as a percentage or in decibel milliWatts (dBm).
 
Cur. = Most recently reported noise reading on the channel.
 
Min. = Minimum noise reading reported on this channel from the time the statistics count was created until the most recent update.
 
Max. = Maximum noise reading reported on this channel from the time the statistics count was created until the most recent update.
Bytes Sent
Bytes sent by this node.
Bytes Received
Bytes received by this node.
Total Bytes
Total bytes, both sent and received, for this node.
Packets Sent
Packets sent by this node.
Packets Received
Packets received by this node.
Total Packets
Total packets, both sent and received, for this node.
Retry Packets
Retry packets sent by this node.
Protected Packets
Number of encrypted packets sent by this node (Protected Frame bit set to 1).
WEP ICV Errors
Number of WEP ICV errors encountered in attempting to apply WEP keys to packets from this node.
WEP Key
Name of the user-defined WEP key currently in use to decrypt traffic from this node.
Beacon Packets
Number of beacon packets sent by this node.
Broadcast ESSID
Number of broadcast ESSID packets sent by this node.
Power Save
The power save state most recently reported by this node. Values are awake or sleep.
Roam Time
For STAs moving between APs, shows the time between last successful data transmission (for example, with previous AP) and successful association with new AP. For APs, shows average value for associated STAs entering the BSS during the capture session.
Data Rate columns
Columns show the number of Packets (or Bytes) sent at the data rate named in the column header. You can show columns for any and all data rates supported by the current adapter.
Broadcast Packets
Total broadcast packets sent by this node.
Broadcast Bytes
Total broadcast bytes sent by this node.
Multicast Packets
Total multicast packets sent by this node.
Multicast Bytes
Total multicast bytes sent by this node.
Min. Size Sent
The size of the smallest packet sent by this node.
Max. Size Sent
The size of the largest packet sent by this node.
Avg. Size Sent
The average size of the packets sent by this node.
Min. Size Received
The size of the smallest packet received by this node.
Max. Size Received
The size of the largest packet received by this node.
Avg. Size Received
The average size of the packets received by this node.
First Time Sent
Time stamp of the first packet sent by this node.
Last Time Sent
Time stamp of the most recent packet sent by this node.
First Time Received
Time stamp of the first packet received by this node.
Last Time Received
Time stamp of the most recent packet received by this node.
Duration
The difference between the time stamp of the earliest sent or received packet and that of the most recent sent or received packet.
Privacy
Shows True or False, and indicates whether the Privacy bit in the capabilities sections of Management packets (Beacon, Probe, and so forth) recently sent by this node was set to 1 (True) or 0 (False). This tells potential peers that the sending node will use encryption (True) or will not (False).