Ask Your Question
0

Filter by IEEE802.11 Signal strength

asked 2018-09-23 12:05:59 +0000

TKD gravatar image

updated 2018-09-24 13:14:02 +0000

cmaynard gravatar image

Hi All

So I'm a bit bad with building expressions that will actually filter but this filter I'm trying to create would benefit a lot of WS users, not just me.

It's pretty simple: I would just like to see all packets / frames / all that have a signal strength equal to or greater than -70dBm.

Obviously the 70 is a variable but I just used that number because devices with a signal strength of that or greater are usually quite close to the device you're WSing from.

If anyone is able to reply with the expression then that would be about the most cool thing in my life right now.

Cheers.

edit retag flag offensive close merge delete

1 Answer

Sort by ยป oldest newest most voted
0

answered 2018-09-23 13:01:28 +0000

Bob Jones gravatar image

updated 2018-09-23 16:48:15 +0000

Guy Harris gravatar image

Maybe something like this:

wlan_radio.signal_dbm >= -70

There are other ways, too, and some possible filters come and go with versions. I'd start here then if this doesn't help, you can find some other references below.

edit flag offensive delete link more

Comments

wlan_radio filters are preferable, because there are several different types of radio metadata header that Wireshark can read (radiotap, Prism, AVS, PPI, NetMon, "Peek tagged", etc.), and the wlan_radio header provides a metadata-header-independent version of which of that information is available (not all metadata headers provide absolute signal strength in dBm), so you can test it regardless of the metadata header used in a particular capture.

Guy Harris gravatar imageGuy Harris ( 2018-09-24 18:40:36 +0000 )edit

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

1 follower

Stats

Asked: 2018-09-23 12:05:59 +0000

Seen: 64 times

Last updated: Sep 24