Windows Local Agent
v2.4.27 · secure cloud relay · no open portsThis site never talks to an access point and never opens a connection to your computer. A small Windows program runs beside the APs, speaks the Cisco NSI / spectrum protocol to each one, decodes the sweeps locally and dials outbound over TLS to the cloud relay. Your browser joins the same paired session and receives the decoded telemetry. One agent serves up to ten sensors, each able to hold 2.4, 5 and 6 GHz open at once.
Cisco AP sensor ─┐ Cisco AP sensor ─┼─► Windows Local Agent ──outbound TLS──► cloud relay ──► this browser Cisco AP sensor ─┘ NSI decode · key stays here paired session only
127.0.0.1:8790 for its own control panel, which is reachable from that machine alone.1Prepare each access point
Enable spectrum monitoring on the radios you want to sweep and note the AP management address plus the NSI / spectrum key. Slot 0 is 2.4 GHz, slot 1 is 5 GHz and slot 2 is 6 GHz on capable hardware. A Cisco 3702i (CleanAir Express) covers 2.4 and 5 GHz only — it has no 6 GHz radio.
2Install the agent
Download the package, unzip it anywhere on a Windows machine that can reach the APs, then double-click INSTALL-WINDOWS.bat. It fetches a private copy of the runtime into the agent folder, needs no administrator rights, installs nothing system-wide and leaves a Desktop shortcut. Start the agent from that shortcut; the control panel opens in your browser.
http://127.0.0.1:8790 agent control panel (this machine only)
3Pair with a code
On the Connection page choose Local Agent and press Generate pairing code. Type the code into the agent control panel. The code is single-use and short-lived; the agent then holds a session-scoped token and joins the private relay channel. The Connection page switches to Agent Online.
4Configure the access point locally
In the agent control panel add a sensor: name, AP address and the spectrum key (masked, with show/hide). No band selection is needed — on save the agent probes the AP's Cisco NSI listeners (2.4 GHz 37540, 5 GHz 37550) and automatically starts every spectrum radio that answers; port overrides live under Advanced for troubleshooting. The key is sealed with Windows DPAPI for the current user, and the AP address is masked before any status is reported. Neither the key nor the full address ever reaches this website.
5Connect and analyse
Bind the agent sensor on the Connection page and press Connect. Real-time FFT, swept spectrogram, duty cycle, power vs time, channel utilisation, devices/interferers and RF events are all driven by the live stream. Use Run self-test in the control panel to check the site, the relay channel and TCP reachability of each AP before you blame the RF.
6When the decoder does not recognise the stream
Cisco ships several binary sweep dialects. The agent auto-detects the common SAgE and classic NSI profiles and validates a few sweeps before locking one in. If nothing matches, it reports unsupported, writes a capture file next to the agent and streams nothing — it never invents data. Send that capture to have a profile added. Frames produced by the agent’s synthetic test mode are always flagged as synthetic and labelled as such here.
Versions & Compatibility
keep the agent in step with the siteThe agent checks compatibility while pairing and refuses a version this site can no longer speak to. Relay logs and unknown-dialect captures can be downloaded from the Connection page diagnostics panel.