A city hall AP radio advertises several SSIDs on one BSSID. How should the protocol analyst scope filters when investigating only the staff BSS?
Select an answer to reveal the explanation.
Short Explanation
One radio can host several SSIDs like floors sharing an elevator shaft—you still need the right floor button. Filter to the staff SSID/BSS so guest chatter doesn’t muddy retries and roam stats. Averaging everything together or killing SSIDs for the capture just pollutes or disrupts service.
Full Explanation
When multiple SSIDs share a radio/BSSID context, analysts must filter to the BSS and SSID of interest to avoid mixing client populations and QoS/security profiles. Channel-only filters are too coarse when several BSS instances coexist. Temporarily disabling production SSIDs is an operational disruption, not a filtering technique.