WaveShark

2.4 GHz

Wi-Fi

802.11a/g/b and single-stream n: network names, the addresses talking, the rate each frame arrived at and whether an address is randomised.

A Wi-Fi channel is 20 MHz wide, so reading one is a job for a HackRF or a LimeSDR rather than a dongle. What comes out is a survey: the networks beaconing, the clients probing, the rates in use and the addresses that keep appearing.

The channels view says how crowded each channel is, which is the practical answer to where to put your own network. The devices view keeps one row per address with the strongest level it was ever heard at, and a drive exports as WiGLE CSV.

What comes out

  • SSID from beacons and probe responses
  • Transmitter and receiver addresses, with randomisation flagged
  • Data rate per frame, and the channel
  • Frame type: management, control or data
$ waveshark --tune 2437 --span 20000 --channels

Read next

Bluetooth LEZigbee, Thread and MatterDrone Remote ID

Something did not decode?

Record the burst with --record and open an issue with the capture. A capture that decodes becomes a test fixture.

Open an issue