System and method for wireless network monitoring
View Patent ↗A technique for wireless network monitoring involves scanning channels using clients instead of access points. An example of a method according to the technique may include, for example, receiving from a wireless access point a command to perform a channel scanning function, listening on a channel associated with the channel scanning function, and sending RF data found on the channel to the wireless access point. Another example of a method according to the technique may include, for example, scanning a first channel, switching from the first channel to a second channel, sending data on the second channel to an access point, switching from the second channel to the first channel, and resuming scanning on the first channel. A system according to the technique may include one or more scanning clients, proxy clients, multi-channel clients, or other clients that are capable of scanning channels in lieu of an access point.
1. A method comprising:
receiving from a wireless access point a command to find out about a device at a non-access point (non-AP) wireless station;
listening at the non-AP wireless station on a channel associated with the device;
filtering at the non-AP wireless station RF data found on the channel data using a MAC address associated with the device;
sending from the non-AP wireless station the filtered RF data found on the channel to the wireless access point.
2. The method of claim 1 , further comprising sending the command from a switch to the wireless access point.
3. The method of claim 1 , further comprising sending the command from the wireless access point to a wireless client associated with the wireless access point.
4. The method of claim 1 , further comprising listening on the channel for a period of time that is specified in the command.
5. The method of claim 1 , further comprising filtering the RF data using one or more of the categories consisting of channel number, frame type, and frame subtype.
6. The method of claim 1 , further comprising generating a report from the RF data.
7. The method of claim 1 , further comprising generating a report from the RF data, wherein the sending the RF data found on the channel includes sending the report.
8. The method of claim 1 , further comprising performing countermeasures in response to the RF data.
9. The method of claim 1 , wherein the RF data is associated with 802.11 standards-compliant interfaces.
10. A method comprising:
scanning at a non-access point (non-AP) wireless station a first channel of a plurality of wireless channels;
filtering RF data found on the first channel using a MAC address associated with a device;
switching from the first channel to a second channel of the plurality of wireless channels, wherein an access point is on the second channel;
sending to the access point on the second channel the MAC address-filtered RF data found on the second channel to the second channel;
switching from the second channel to the first channel;
resuming scanning on the first channel at the non-AP wireless station.
11. The method of claim 10 , further comprising scanning each of the plurality of wireless channels.
12. The method of claim 10 , further comprising receiving a command from the access point, wherein the RF data sent to the access point is in accordance with the command.
13. The method of claim 10 , wherein
switching from the first channel to the second channel includes a first client switching from the first channel to the second channel;
switching from the second channel to the first channel includes a second client switching from the second channel to the first channel.
14. The method of claim 10 , further comprising generating a report using the RF data, wherein the sending the RF data on the second channel includes sending the report.
15. The method of claim 10 , further comprising:
generating a report using the RF data;
performing countermeasures in response to the report.
16. The method of claim 10 , further comprising using a proxy client to forward a command from the access point to a client, and to provide the RF data to the access point from the client.
17. A method comprising:
sending a command from an access point on a first channel to a non-access point (non-AP) wireless proxy client;
switching the non-AP wireless proxy client to a second channel;
forwarding the command from the non-AP wireless proxy client to a non-AP wireless client on the second channel;
generating a report that is responsive to the command;
switching the non-AP wireless proxy client to the first channel;
forwarding the report from the non-AP wireless proxy client to the access point.
18. The method of claim 17 , wherein generating the report includes generating the report at the non-AP wireless client, further comprising transmitting the report from the non-AP wireless client to the non-AP wireless proxy client.
19. The method of claim 17 , further comprising, after forwarding the command from the non-AP wireless proxy client to the non-AP wireless client, swapping the roles of the client and the non-AP wireless proxy client such that the non-AP wireless proxy client becomes the non-AP wireless client and the non-AP wireless client becomes the non-AP wireless proxy client, wherein, after the swapping of roles, the generating a report includes generating the report at the non-AP wireless proxy client.
20. The method of claim 17 , wherein the report includes a frame report frame.