WiFi module: Difference between revisions

405 bytes removed ,  30 March 2023
no edit summary
No edit summary
No edit summary
Line 1: Line 1:
This module analyses IEEE 802.11 frames either acquired using the WiFi monitoring feature (see TODO) or encapsulated in special packets (https://www.wireshark.org/docs/dfref/p/peekremote.html). It also provides statistics when analyzing PCAPs with a Radiotap link layer and IEEE 802.11 packets.
This module analyses IEEE 802.11 frames either acquired using the WiFi monitoring feature (see TODO) or encapsulated in special packets (https://www.wireshark.org/docs/dfref/p/peekremote.html). It also provides statistics when analyzing PCAPs with a Radiotap link type and IEEE 802.11 packets.


=== Statistics ===
=== Statistics ===
'''Channel statistics'''
'''Channel statistics'''


This page shows a list of all WiFi channels on which traffic is seen and offers the ability to capture the traffic of each channel. The table contains the following data"
This page shows a list of all WiFi channels on which traffic is seen and offers the ability to capture the traffic of each channel. The table contains the following data:


* Frequency: the frequency of the channel in MHz. This uniquely identifies a channel as the channel numbers themselves are ambiguous.
* Frequency: the frequency of the channel in MHz. This uniquely identifies a channel as the channel numbers themselves are ambiguous.
Line 13: Line 13:
* Bytes: the number of bytes seen on this channel.
* Bytes: the number of bytes seen on this channel.
* Graph: Multigraph selection that can show packet rate and data rate history.
* Graph: Multigraph selection that can show packet rate and data rate history.
The channel frequency can be clicked on get a list of BSS in that specific channel. This table contains the same information as the global table in the BSS statistics.


==== BSS statistics ====
==== BSS statistics ====
[[File:Ieee 802 11 bss list.png|thumb|600x600px|BSS list]]
[[File:Ieee 802 11 bss list.png|thumb|600x600px|BSS list]]The table shown on this page lists all so-called "base service sets" which are usually the access points.
The first entry tab "BSS list" shows shows two generic packet counts:
* processed packets: This is the number of IEEE 802.11 data Qos frames and Beacon frames (https://en.wikipedia.org/wiki/802.11_Frame_Types#Types_and_SubTypes) that are decoded and accounted for statistics. This frame are type 2 and subtype 8 and type 0/8 respectively.
* skipped packets: This is the number of IEEE 802.11 frames that are not analyzed (because they are not supported or invalid). This includes all frame not being type 0/2 or subtype 8, as well as possible corrupt packets.
The table shown in this section lists all so-called "base service sets" which are usually the access points.


Columns:
The table contains the following data:


* BSS ID: This is the MAC address of the station.
* BSS ID: This is the MAC address of the station.
Line 33: Line 30:
** The actual subscribers can be seen in the BSS detail page.
** The actual subscribers can be seen in the BSS detail page.
* Current channel: This is the channel the BSS is currently operating on (firmware >= 3.4)
* Current channel: This is the channel the BSS is currently operating on (firmware >= 3.4)
* Current frequency: This is the frequency the BSS is currently operating on (firmware >= 4.0)
* Current channel utilization: This value is extracted from beacon frames indicating the percentage of time the channel was active (firmware >= 3.4)
* Current channel utilization: This value is extracted from beacon frames indicating the percentage of time the channel was active (firmware >= 3.4)
* Current frequency: This classifies the BSS frequency into 2.4 GHz, 5 GHz, or 0 for other frequencies
* Current frequency: This classifies the BSS frequency into 2.4 GHz, 5 GHz, or 0 for other frequencies
* pps transmitted: This is the number of QoS or beacon frames that have been analyzed for this BSS.
* pps transmitted: This is the number of frames that have been analyzed for this BSS.
** Note: This is not the number of packets sent in the whole WiFi channel.
* bytes transmitted: This is the number of bytes that have been analyzed for this BSS.
* bytes transmitted: Similar to pps, this is the number bytes of QoS or beacon frames.
* Signal/noise level: These values indicate the signal quality of the BSS.
* Signal/noise level: These values indicate the signal quality of the BSS.
** It uses information from packets sent from or to the BSS to give an indication ab out the overall quality.
** It uses information from packets sent from or to the BSS to give an indication ab out the overall quality.
* Graph: Multiple graphs are shown for detailed information over time:
* Graph: Multigraph selection for detailed information over time:
** Packets sent: this is the number of QoS/beacon frames sent over time
** Packets: this is the number of frames seen over time
** Bytes: this is the number of bytes seen over time
** dbm signal/noise: the signal and noise level over time
** dbm signal/noise: the signal and noise level over time
** Channel: This is the channel used at any given time (firmware >= 3.4)
** Channel: This is the channel used at any given time (firmware >= 3.4)
** Utilization: This is the channel utilization over time (firmware >= 3.4)
[[File:Ieee 802 11 client list.png|thumb|300x300px|WiFi client list]]
[[File:Ieee 802 11 client list.png|thumb|300x300px|WiFi client list]]


122

edits