Skip to content

ZeroTrace AirLeak

Device List

Using the Devices page to find what you're looking for

The Devices page is where AirLeak's data density really shows. Every device the radio has seen, in one fast, filterable, sortable table.


Two tabs, two contexts

The page has two tabs:

  • BLE devices (N) — every Bluetooth peer observed
  • WiFi networks (M) — every access point and probing client

The badge counts update live. Click the right tab for the kind of device you're looking for.


What's in the BLE table

ColumnWhat it shows
NameFriendly name + MAC address + secondary identifier
ClassDevice classification + confidence (e.g. iPhone (94))
SignalA 4-bar gauge with current and best-seen RSSI
DistanceRSSI-based distance estimate in meters
AdvAdvertising interval in milliseconds
ObsObservation count + per-second rate
ActionThe Apple Continuity action (when Apple device)
InfoBattery, BLE flags, TX power, OS version
AlertsPrivacy alert chips (PII / Corp / AirDrop / FindMy / Random MAC)

Click any row to open the device's detail page. See Single Device View for what's on it.


What's in the WiFi table

ColumnWhat it shows
NameSSID (or <hidden>) + BSSID
ClassNetwork classification (consumer AP / enterprise / mobile hotspot / ...)
SignalCurrent RSSI
Channel2.4 GHz channel (1–13)
GenerationWiFi 4 / 5 / 6 / 7
EncryptionOPEN / WEP / WPA-Personal / WPA2-Personal / WPA3-Personal / WPA2-Enterprise / OWE
StationsNumber of associated clients (from BSS Load)
CountryCountry IE code
ObsObservation count
AlertsPrivacy alert chips (Open / WEP / WPS / MFP off)

The search box matches case-insensitive substrings against:

  • Friendly name
  • MAC / BSSID
  • SSID (probed and observed)
  • Class label
  • Vendor name

Search updates live. Clear the box to see everything again.


Filter dropdown

The filter dropdown is tab-aware — it shows different filters on the BLE tab vs the WiFi tab.

BLE filters

FilterWhat it shows
AllEvery BLE device
PhonesiPhones / Android phones
WearablesWatches / fitness bands / rings
AudioAirPods / headphones / speakers
TrackersAirTags / Tile / SmartTag
Smart HomeTVs / smart speakers / IoT
With alertsOnly devices that fired ≥1 alert
Random MACLocally-administered MACs only
Apple ecosystemAnything in Apple's lineup
UnknownUnclassified devices

WiFi filters

FilterWhat it shows
AllEvery observed network
Open networksUnencrypted only
WEPWEP only (legacy / vulnerable)
WPA-PersonalWPA / WPA2-Personal
WPA3WPA3-Personal or transition
Enterprise802.1X-using networks
Mobile hotspotsPhone hotspots
HiddenHidden SSID
With WPSWPS-enabled networks
MFP offManagement-frame-protection disabled

Filters are AND-combined with search and faceted chips.


Faceted chips

A row of horizontal chips below the filter dropdown shows the most-common classes in the current view, with live counts.

Click a chip to add it to your filter (multi-select). Click again to remove it. Chip counts are right-aligned for easy scanning.

This is the fastest way to drill in. "I want to see only AirTags" → click the AirTag chip.


Sorting

The Sort dropdown gives you:

  • Recent (default) — newest activity first
  • First seen — earliest to latest
  • RSSI strongest — closest devices first
  • RSSI best ever — historically closest first
  • Observation count — busiest devices first
  • Class — alphabetical
  • Name — alphabetical

Sort direction is reversible by clicking the column header.


Density toggle

A button in the table header switches between:

  • Compact — single-line rows, ~25 visible at once
  • Comfortable — two-line rows, ~15 visible

Pick whichever fits your screen and how much info you need to see at a glance. The setting is remembered between sessions.


Per-row actions

Right-click any row (or click the three-dot menu on hover) for:

ActionEffect
PinPins to the top of the table regardless of sort
MuteHides from the table without removing from the aggregator
Mark as ownTags this device as one of yours (suppresses logging, shows green check)
Copy MACCopies the MAC to clipboard
Open detailOpens the device detail page

These are persistent — they survive disconnect and reboot via the desktop's local store.


Pause / resume

The Pause button (top-right of the table) freezes the view at its current state. New events queue silently while paused — when you click Resume, the queued updates apply. Useful for inspecting a stable snapshot without things shifting around.

A "+12 new" badge appears while paused so you know how much you'll catch up to.


Empty states

StateWhat you see
Disconnected"Not connected. Open the Overview page to connect."
In Setup mode"Currently in Setup. Switch to Monitor to start capturing."
Monitor, no devices yet"Capturing... waiting for first frames." (animated)
Filter excludes everything"No devices match. Try clearing filters."

Combine filters for precision

Search box + filter dropdown + class chips are all AND-combined. Want to see only iPhones with PII alerts? Click the iPhone chip → open filter → "With alerts." The badge counts update so you can see how many devices match each step.

Command Palette

Search for a command to run...