Peer maps from a courthouse SSID capture show an unexpected STA exchanging large volumes of data with many peers it should not. What is the most appropriate protocol-analysis use of that peer-map evidence?
Select an answer to reveal the explanation.
Short Explanation
Peer maps are the seating chart of who talks to whom. When a stranger is chatting up half the courtroom Wi-Fi, that's your cue to hunt a rogue or mis-joined device—not to shrug it off as Bluetooth trivia.
Full Explanation
Analyzer peer maps and host/conversation statistics visualize which MACs exchange frames and at what volume. Unexpected high-degree talkers on a secured municipal SSID are investigative leads for misassociation, bridging, malware, or rogue behavior. Experts use these views to prioritize which stations to filter and decode next rather than treating raw frame floods as the only starting point.