Filter by IEEE802.11 Signal strength

asked 2018-09-23 12:05:59 +0000

TKD
1 ●1 ●1 ●1

updated 2018-09-24 13:14:02 +0000

cmaynard

11115 ●11 ●317 ●165 https://www.igt.com/

Hi All

So I'm a bit bad with building expressions that will actually filter but this filter I'm trying to create would benefit a lot of WS users, not just me.

It's pretty simple: I would just like to see all packets / frames / all that have a signal strength equal to or greater than -70dBm.

Obviously the 70 is a variable but I just used that number because devices with a signal strength of that or greater are usually quite close to the device you're WSing from.

If anyone is able to reply with the expression then that would be about the most cool thing in my life right now.

Cheers.

answered 2018-09-23 13:01:28 +0000

Bob Jones
1496 ●2 ●179 ●22 Boston, MA

updated 2018-09-23 16:48:15 +0000

Guy Harris
19890 ●3 ●659 ●207

Maybe something like this:

wlan_radio.signal_dbm >= -70

There are other ways, too, and some possible filters come and go with versions. I'd start here then if this doesn't help, you can find some other references below.

edit flag offensive delete link

Comments

wlan_radio filters are preferable, because there are several different types of radio metadata header that Wireshark can read (radiotap, Prism, AVS, PPI, NetMon, "Peek tagged", etc.), and the wlan_radio header provides a metadata-header-independent version of which of that information is available (not all metadata headers provide absolute signal strength in dBm), so you can test it regardless of the metadata header used in a particular capture.

Guy Harris ( 2018-09-24 18:40:36 +0000 )edit

add a comment

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Filter by IEEE802.11 Signal strength

1 Answer

Comments

Your Answer

Question Tools

Stats

Filter by IEEE802.11 Signal strength edit

1 Answer

Comments

Your Answer

Question Tools

Stats

Filter by IEEE802.11 Signal strength