They take WLAN trackings (basically arps/pings) via a tool called "Netstumbler", map GIS data ontop of aerial photos, add signal strength colorization and voila... a overlaid map of 802.11 RF activity per scanned locale. http://www.ittc.ku.edu/wlan/