Ask Your Question
0

what is the capture/display filter to get RSSI information of WiFi users?

asked 2018-08-12 19:45:31 +0000

Natiya gravatar image

If I'm able to get 80211n traffic with my network adapter, would I be able to see the RSSI information? what should be the filter to see it?

edit retag flag offensive close merge delete

1 Answer

Sort by ยป oldest newest most voted
0

answered 2018-08-12 22:08:58 +0000

Bob Jones gravatar image

updated 2018-08-12 23:27:49 +0000

Guy Harris gravatar image

If you are in monitor/promiscuous mode with your wifi adapter, then yes, you will likely get signal strength information from the devices around you. It's likely just passed up to Wireshark so no capture filter would be necessary - have a look at the radiotap or ppi headers in one of the frames and look for signal strength or the like. Even better, look for the 802.11 radio information header and the signal strength field:

image description

A display filter for the field might be:

wlan_radio.signal_dbm

But this is not likely what you want. You probably want to filter on one of the hosts you are interested in:

wlan.ta == <mac address>

then look at these values. I'd add them to column or graph them. Note that this is what your capture device sees from that device; no more, no less. It may or may not be representative of what the infrastructure sees for the device, depending on where you are capturing the traffic.

edit flag offensive delete link more

Comments

Thank you very much!

Natiya gravatar imageNatiya ( 2018-08-13 17:54:05 +0000 )edit

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

1 follower

Stats

Asked: 2018-08-12 19:45:31 +0000

Seen: 160 times

Last updated: Aug 12