WiFi monitor模式的配置和运行检查
- 1. WiFi monitor模式介绍
- 2. WiFi monitor模式查看
- Step1：确保计算机上有安装硬件WiFi无线网卡
- Step2：安装必要的工具
- Step 3：`iw list`查看无线网卡是否支持monitor模式
- Step 4：配置WiFi monitor模式
- Step 5：查看&设置WiFi RF信道
- Step 6：检验WiFi monitor模式
- 3. 参考资料
1. WiFi monitor模式介绍
通常大家对于WiFi的理解主要来自无线路由器和和接入无线路器的设备，比如：笔记本电脑，手机，智能电视机，智能开关，智能电饭煲等。由于这些设备使得我们的日常生活更加便捷。
从技术的角度来说，这些智能设备都是基于IP网络在进行信息交互。说的更加专业一点就是这些设备都满足OSI（Open System Interconnection）分层设计，遵循IPv4/IPv6协议进行信息交互。
补充介绍下OSI七层模型：
- L7应用层：HTTP FTP TFTP SMTP SNMP DNS TELNET HTTPS POP3 DHCP
- L6表示层：数据的表示、安全、压缩；JPEG、ASCll、EBCDIC、加密格式等。（在五层模型里面合并到应用层）
- L5会话层：建立、管理、终止会话。对应主机进程，指本地主机与远程主机正在进行的会话。（在五层模型里面合并到应用层）
- L4传输层：TCP UDP
- L3网络层：ICMP IGMP IP（IPV4 IPV6）
- L2数据链路层：建立逻辑连接、进行硬件地址寻址、差错校验等功能。将比特组合成字节进而组合成帧，用MAC地址访问介质，错误发现但不能纠正。
- L1物理层：设备之间非结构化原始数据的传输和接收
这里所讲述的WiFi monitor模式就是运行在L2数据链路层，从软件的角度来看就是最底层了，在下面就是与硬件寄存器相关的操作(这块内容大部分就是驱动层，硬件解决方案不同可能会有不同的差异)。
WiFi monitor就是在L2数据链路层对WiFi RF信号进行监视。
2. WiFi monitor模式查看
$ lsb_release -a
No LSB modules are available.
Distributor ID: Ubuntu
Description: Ubuntu 20.04.5 LTS
Release: 20.04
Codename: focal
$ uname -a
Linux daniel-ThinkPad-SL410 5.15.0-58-generic #64~20.04.1-Ubuntu SMP Fri Jan 6 16:42:31 UTC 2023 x86_64 x86_64 x86_64 GNU/Linux
注：本文基于ubuntu Linux系统进行介绍，windows的朋友请自行寻找相应的工具。
Step1：确保计算机上有安装硬件WiFi无线网卡
Step2：安装必要的工具
$ sudo apt-get install tcpdump wireless-tools net-tools
Step 3：iw list查看无线网卡是否支持monitor模式
注：如果无线网卡不支持该monitor模式，如果需要，请购买相应的无线网卡。
$ iw list
Wiphy phy0
max # scan SSIDs: 20
max scan IEs length: 195 bytes
max # sched scan SSIDs: 0
max # match sets: 0
Retry short limit: 7
Retry long limit: 4
Coverage class: 0 (up to 0m)
Device supports RSN-IBSS.
Supported Ciphers:
* WEP40 (00-0f-ac:1)
* WEP104 (00-0f-ac:5)
* TKIP (00-0f-ac:2)
* CCMP-128 (00-0f-ac:4)
* CCMP-256 (00-0f-ac:10)
* GCMP-128 (00-0f-ac:8)
* GCMP-256 (00-0f-ac:9)
Available Antennas: TX 0 RX 0
Supported interface modes:
* IBSS
* managed
* monitor
Band 1:
Capabilities: 0x107e
HT20/HT40
SM Power Save disabled
RX Greenfield
RX HT20 SGI
RX HT40 SGI
No RX STBC
Max AMSDU length: 3839 bytes
DSSS/CCK HT40
Maximum RX AMPDU length 65535 bytes (exponent: 0x003)
Minimum RX AMPDU time spacing: 4 usec (0x05)
HT Max RX data rate: 300 Mbps
HT RX MCS rate indexes supported: 0-15
TX unequal modulation not supported
HT TX Max spatial streams: 1
HT TX MCS rate indexes supported may differ
Bitrates (non-HT):
* 1.0 Mbps
* 2.0 Mbps (short preamble supported)
* 5.5 Mbps (short preamble supported)
* 11.0 Mbps (short preamble supported)
* 6.0 Mbps
* 9.0 Mbps
* 12.0 Mbps
* 18.0 Mbps
* 24.0 Mbps
* 36.0 Mbps
* 48.0 Mbps
* 54.0 Mbps
Frequencies:
* 2412 MHz [1] (14.0 dBm)
* 2417 MHz [2] (14.0 dBm)
* 2422 MHz [3] (14.0 dBm)
* 2427 MHz [4] (14.0 dBm)
* 2432 MHz [5] (14.0 dBm)
* 2437 MHz [6] (14.0 dBm)
* 2442 MHz [7] (14.0 dBm)
* 2447 MHz [8] (14.0 dBm)
* 2452 MHz [9] (14.0 dBm)
* 2457 MHz [10] (14.0 dBm)
* 2462 MHz [11] (14.0 dBm)
* 2467 MHz [12] (14.0 dBm) (no IR)
* 2472 MHz [13] (14.0 dBm) (no IR)
Supported commands:
* new_interface
* set_interface
* new_key
* start_ap
* new_station
* new_mpath
* set_mesh_config
* set_bss
* authenticate
* associate
* deauthenticate
* disassociate
* join_ibss
* join_mesh
* remain_on_channel
* set_tx_bitrate_mask
* frame
* frame_wait_cancel
* set_wiphy_netns
* set_channel
* probe_client
* set_noack_map
* register_beacons
* start_p2p_device
* set_mcast_rate
* connect
* disconnect
* set_qos_map
* set_multicast_to_unicast
software interface modes (can always be added):
* monitor
interface combinations are not supported
HT Capability overrides:
* MCS: ff ff ff ff ff ff ff ff ff ff
* maximum A-MSDU length
* supported channel width
* short GI for 40 MHz
* max A-MPDU length exponent
* min MPDU start spacing
Device supports TX status socket option.
Device supports HT-IBSS.
Device supports SAE with AUTHENTICATE command
Device supports scan flush.
Device supports per-vif TX power setting
Driver supports full state transitions for AP/GO clients
Driver supports a userspace MPM
Device supports static SMPS
Device supports dynamic SMPS
Device supports configuring vdev MAC-addr on create.
max # scan plans: 1
max scan plan interval: -1
max scan plan iterations: 0
Supported TX frame types:
* IBSS: 0x00 0x10 0x20 0x30 0x40 0x50 0x60 0x70 0x80 0x90 0xa0 0xb0 0xc0 0xd0 0xe0 0xf0
* managed: 0x00 0x10 0x20 0x30 0x40 0x50 0x60 0x70 0x80 0x90 0xa0 0xb0 0xc0 0xd0 0xe0 0xf0
* AP: 0x00 0x10 0x20 0x30 0x40 0x50 0x60 0x70 0x80 0x90 0xa0 0xb0 0xc0 0xd0 0xe0 0xf0
* AP/VLAN: 0x00 0x10 0x20 0x30 0x40 0x50 0x60 0x70 0x80 0x90 0xa0 0xb0 0xc0 0xd0 0xe0 0xf0
* mesh point: 0x00 0x10 0x20 0x30 0x40 0x50 0x60 0x70 0x80 0x90 0xa0 0xb0 0xc0 0xd0 0xe0 0xf0
* P2P-client: 0x00 0x10 0x20 0x30 0x40 0x50 0x60 0x70 0x80 0x90 0xa0 0xb0 0xc0 0xd0 0xe0 0xf0
* P2P-GO: 0x00 0x10 0x20 0x30 0x40 0x50 0x60 0x70 0x80 0x90 0xa0 0xb0 0xc0 0xd0 0xe0 0xf0
* P2P-device: 0x00 0x10 0x20 0x30 0x40 0x50 0x60 0x70 0x80 0x90 0xa0 0xb0 0xc0 0xd0 0xe0 0xf0
Supported RX frame types:
* IBSS: 0x40 0xb0 0xc0 0xd0
* managed: 0x40 0xb0 0xd0
* AP: 0x00 0x20 0x40 0xa0 0xb0 0xc0 0xd0
* AP/VLAN: 0x00 0x20 0x40 0xa0 0xb0 0xc0 0xd0
* mesh point: 0xb0 0xc0 0xd0
* P2P-client: 0x40 0xd0
* P2P-GO: 0x00 0x20 0x40 0xa0 0xb0 0xc0 0xd0
* P2P-device: 0x40 0xd0
Supported extended features:
* [ RRM ]: RRM
* [ FILS_STA ]: STA FILS (Fast Initial Link Setup)
* [ CQM_RSSI_LIST ]: multiple CQM_RSSI_THOLD records
* [ CONTROL_PORT_OVER_NL80211 ]: control port over nl80211
* [ EXT_KEY_ID ]: extended key ID support
Step 4：配置WiFi monitor模式
#查看笔记本网卡
$ nmcli device
DEVICE TYPE STATE CONNECTION
enp8s0 ethernet connected Wired connection 1
docker0 bridge connected docker0
wlp5s0 wifi disconnected --
lo loopback unmanaged --
#设置监听模式
$ sudo ifconfig wlp5s0 down
$ sudo iwconfig wlp5s0 mode monitor
$ sudo ifconfig wlp5s0 up
#查询当前网卡的模式
$ sudo iwconfig
lo no wireless extensions.
enp8s0 no wireless extensions.
wlp5s0 IEEE 802.11 Mode:Monitor Frequency:2.412 GHz Tx-Power=14 dBm
Retry short limit:7 RTS thr:off Fragment thr:off
Power Management:off
docker0 no wireless extensions.
Step 5：查看&设置WiFi RF信道
$ sudo iwlist wlp5s0 channel
wlp5s0 13 channels in total; available frequencies :
Channel 01 : 2.412 GHz
Channel 02 : 2.417 GHz
Channel 03 : 2.422 GHz
Channel 04 : 2.427 GHz
Channel 05 : 2.432 GHz
Channel 06 : 2.437 GHz
Channel 07 : 2.442 GHz
Channel 08 : 2.447 GHz
Channel 09 : 2.452 GHz
Channel 10 : 2.457 GHz
Channel 11 : 2.462 GHz
Channel 12 : 2.467 GHz
Channel 13 : 2.472 GHz
Current Frequency:2.462 GHz (Channel 11)
#设置当前信道为6
$ sudo iwconfig wlp5s0 channel 6
$ sudo iwlist wlp5s0 channel
wlp5s0 13 channels in total; available frequencies :
Channel 01 : 2.412 GHz
Channel 02 : 2.417 GHz
Channel 03 : 2.422 GHz
Channel 04 : 2.427 GHz
Channel 05 : 2.432 GHz
Channel 06 : 2.437 GHz
Channel 07 : 2.442 GHz
Channel 08 : 2.447 GHz
Channel 09 : 2.452 GHz
Channel 10 : 2.457 GHz
Channel 11 : 2.462 GHz
Channel 12 : 2.467 GHz
Channel 13 : 2.472 GHz
Current Frequency:2.437 GHz (Channel 6)
Step 6：检验WiFi monitor模式
通常我们周边的WiFi环境是很复杂的，也就是说充满了RF信号，所以一般来说每个信道都是有信息的，会接收到RF L2数据链路报文。这也是为什么我们的带宽没有理想的那么高的速率。
PS.玩游戏，关注时延的朋友记得一定用有线网络，有线鼠标。无线都是坑！！！
查看下当前6通道2.437 GHz频段上是否有数据
$ sudo tcpdump -i wlp5s0
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on wlp5s0, link-type IEEE802_11_RADIO (802.11 plus radiotap header), capture size 262144 bytes
09:04:25.630909 24.0 Mb/s 2437 MHz 11g -69dBm signal antenna 3 Request-To-Send TA:60:3a:7c:77:22:f1 (oui Unknown)
09:04:25.656676 1.0 Mb/s 2437 MHz 11b -82dBm signal antenna 3 Beacon (ChinaNet-Yp4f) [1.0* 2.0* 5.5* 11.0* 9.0 18.0 36.0 54.0 Mbit] ESS CH: 6, PRIVACY
09:04:25.656816 24.0 Mb/s 2437 MHz 11g -72dBm signal antenna 3 Clear-To-Send RA:c0:d2:f3:2b:9f:54 (oui Unknown)
09:04:25.662118 1.0 Mb/s 2437 MHz 11b -79dBm signal antenna 3 Beacon (501) [1.0* 2.0* 5.5* 11.0* 9.0 18.0 36.0 54.0 Mbit] ESS CH: 6, PRIVACY
09:04:25.665980 1.0 Mb/s 2437 MHz 11b -73dBm signal antenna 3 Beacon (M-hM-^LM-^IM-hM-^NM-^IM-eM-.M-6) [1.0* 2.0* 5.5* 11.0* 6.0 9.0 12.0 18.0 Mbit] ESS CH: 6, PRIVACY
09:04:25.683112 24.0 Mb/s 2437 MHz 11g -60dBm signal antenna 3 Clear-To-Send RA:b8:78:26:94:07:3e (oui Unknown)
09:04:25.683181 24.0 Mb/s 2437 MHz 11g -60dBm signal antenna 3 BA RA:b8:78:26:94:07:3e (oui Unknown)
09:04:25.683423 24.0 Mb/s 2437 MHz 11g -60dBm signal antenna 3 Clear-To-Send RA:b8:78:26:94:07:3e (oui Unknown)
09:04:25.683773 24.0 Mb/s 2437 MHz 11g -60dBm signal antenna 3 Clear-To-Send RA:b8:78:26:94:07:3e (oui Unknown)
09:04:25.684074 24.0 Mb/s 2437 MHz 11g -60dBm signal antenna 3 Clear-To-Send RA:b8:78:26:94:07:3e (oui Unknown)
09:04:25.686923 24.0 Mb/s 2437 MHz 11g -60dBm signal antenna 3 Clear-To-Send RA:b8:78:26:94:07:3e (oui Unknown)
09:04:25.687011 24.0 Mb/s 2437 MHz 11g -60dBm signal antenna 3 BA RA:b8:78:26:94:07:3e (oui Unknown)
09:04:25.687407 24.0 Mb/s 2437 MHz 11g -60dBm signal antenna 3 Clear-To-Send RA:b8:78:26:94:07:3e (oui Unknown)
09:04:25.687486 24.0 Mb/s 2437 MHz 11g -60dBm signal antenna 3 BA RA:b8:78:26:94:07:3e (oui Unknown)
09:04:25.697762 1.0 Mb/s 2437 MHz 11b -58dBm signal antenna 3 Beacon (suncheng) [1.0* 2.0* 5.5* 11.0* 9.0 18.0 36.0 54.0 Mbit] ESS CH: 6, PRIVACY
09:04:25.700238 1.0 Mb/s 2437 MHz 11b -58dBm signal antenna 3 Data IV:6763 Pad 20 KeyID 2
09:04:25.703526 1.0 Mb/s 2437 MHz 11b -74dBm signal antenna 3 Beacon (401) [1.0* 2.0* 5.5* 11.0* 9.0 18.0 36.0 54.0 Mbit] ESS CH: 6, PRIVACY
09:04:25.706720 1.0 Mb/s 2437 MHz 11b -58dBm signal antenna 3 Beacon () [1.0* 2.0* 5.5* 11.0* 9.0 18.0 36.0 54.0 Mbit] ESS CH: 6, PRIVACY
09:04:25.707171 11.0 Mb/s 2437 MHz 11b -66dBm signal antenna 3 Acknowledgment RA:2a:d9:a0:0c:c4:62 (oui Unknown)
09:04:25.707868 24.0 Mb/s 2437 MHz 11g -69dBm signal antenna 3 Request-To-Send TA:60:3a:7c:77:22:f1 (oui Unknown)
09:04:25.711027 11.0 Mb/s 2437 MHz 11b -66dBm signal antenna 3 Acknowledgment RA:2a:d9:a0:0c:c4:62 (oui Unknown)
09:04:25.718055 1.0 Mb/s 2437 MHz 11b -80dBm signal antenna 3 Beacon (Xiaomi_A2EC) [1.0* 2.0* 5.5* 11.0* 6.0 9.0 12.0 18.0 Mbit] ESS CH: 7, PRIVACY
09:04:25.730225 1.0 Mb/s 2437 MHz 11b -18dBm signal antenna 3 Beacon (AutoConnect) [1.0* 2.0* 5.5* 11.0* 6.0 9.0 12.0 18.0 Mbit] ESS CH: 6, PRIVACY
09:04:25.741653 1.0 Mb/s 2437 MHz 11b -79dBm signal antenna 3 Beacon (TP-LINK-101) [1.0* 2.0* 5.5* 11.0* 9.0 18.0 36.0 54.0 Mbit] ESS CH: 6, PRIVACY
09:04:25.768447 1.0 Mb/s 2437 MHz 11b -74dBm signal antenna 3 Beacon (M-hM-^LM-^IM-hM-^NM-^IM-eM-.M-6) [1.0* 2.0* 5.5* 11.0* 6.0 9.0 12.0 18.0 Mbit] ESS CH: 6, PRIVACY
09:04:25.768732 11.0 Mb/s 2437 MHz 11b -67dBm signal antenna 3 Data IV:8fc9 Pad 20 KeyID 2
09:04:25.774773 1.0 Mb/s 2437 MHz 11b -76dBm signal antenna 3 Data IV:6a2d Pad 20 KeyID 1
09:04:25.794897 1.0 Mb/s 2437 MHz 11b -88dBm signal antenna 3 Beacon (101) [1.0* 2.0* 5.5* 11.0* 6.0 9.0 12.0 18.0 Mbit] ESS CH: 6, PRIVACY
09:04:25.798020 1.0 Mb/s 2437 MHz 11b -57dBm signal antenna 3 Beacon (suncheng) [1.0* 2.0* 5.5* 11.0* 9.0 18.0 36.0 54.0 Mbit] ESS CH: 6, PRIVACY
09:04:25.802698 1.0 Mb/s 2437 MHz 11b -58dBm signal antenna 3 Data IV:6764 Pad 20 KeyID 2
09:04:25.805997 1.0 Mb/s 2437 MHz 11b -74dBm signal antenna 3 Beacon (401) [1.0* 2.0* 5.5* 11.0* 9.0 18.0 36.0 54.0 Mbit] ESS CH: 6, PRIVACY
09:04:25.809156 1.0 Mb/s 2437 MHz 11b -59dBm signal antenna 3 Beacon () [1.0* 2.0* 5.5* 11.0* 9.0 18.0 36.0 54.0 Mbit] ESS CH: 6, PRIVACY
09:04:25.833067 1.0 Mb/s 2437 MHz 11b -18dBm signal antenna 3 Beacon (AutoConnect) [1.0* 2.0* 5.5* 11.0* 6.0 9.0 12.0 18.0 Mbit] ESS CH: 6, PRIVACY
09:04:25.840922 1.0 Mb/s 2437 MHz 11b -84dBm signal antenna 3 Beacon (TP-LINK-101) [1.0* 2.0* 5.5* 11.0* 9.0 18.0 36.0 54.0 Mbit] ESS CH: 6, PRIVACY
09:04:25.853205 1.0 Mb/s 2437 MHz 11b -78dBm signal antenna 3 Beacon (wangxuemin) [1.0* 2.0* 5.5* 11.0* 6.0 9.0 12.0 18.0 Mbit] ESS CH: 6, PRIVACY
09:04:25.857430 1.0 Mb/s 2437 MHz 11b -74dBm signal antenna 3 Data IV:6d6f Pad 20 KeyID 1
09:04:25.864671 1.0 Mb/s 2437 MHz 11b -80dBm signal antenna 3 Probe Response (501) [1.0* 2.0* 5.5* 11.0* 9.0 18.0 36.0 54.0 Mbit] CH: 6, PRIVACY
09:04:25.883431 1.0 Mb/s 2437 MHz 11b -87dBm signal antenna 3 Beacon () [1.0* 2.0* 5.5* 11.0* 9.0 18.0 36.0 54.0 Mbit] ESS CH: 6, PRIVACY
09:04:25.885002 24.0 Mb/s 2437 MHz 11g -72dBm signal antenna 3 BA RA:60:3a:7c:77:22:f1 (oui Unknown)
09:04:25.885875 24.0 Mb/s 2437 MHz 11g -77dBm signal antenna 3 Request-To-Send TA:c6:1a:3a:1e:f9:9f (oui Unknown)
09:04:25.886150 24.0 Mb/s 2437 MHz 11g -77dBm signal antenna 3 Request-To-Send TA:c6:1a:3a:1e:f9:9f (oui Unknown)
09:04:25.886369 24.0 Mb/s 2437 MHz 11g -75dBm signal antenna 3 Request-To-Send TA:c6:1a:3a:1e:f9:9f (oui Unknown)
09:04:25.888065 24.0 Mb/s 2437 MHz 11g -74dBm signal antenna 3 Clear-To-Send RA:60:3a:7c:77:22:f1 (oui Unknown)
09:04:25.888655 24.0 Mb/s 2437 MHz 11g -77dBm signal antenna 3 Request-To-Send TA:c6:1a:3a:1e:f9:9f (oui Unknown)
09:04:25.888964 24.0 Mb/s 2437 MHz 11g -60dBm signal antenna 3 Clear-To-Send RA:b8:78:26:94:07:3e (oui Unknown)
09:04:25.889100 24.0 Mb/s 2437 MHz 11g -60dBm signal antenna 3 BA RA:b8:78:26:94:07:3e (oui Unknown)
09:04:25.889290 24.0 Mb/s 2437 MHz 11g -72dBm signal antenna 3 BA RA:2a:d9:a0:0c:c4:62 (oui Unknown)
09:04:25.889991 24.0 Mb/s 2437 MHz 11g -76dBm signal antenna 3 Request-To-Send TA:a4:1a:3a:1e:f9:9f (oui Unknown)
09:04:25.891854 24.0 Mb/s 2437 MHz 11g -63dBm signal antenna 3 Clear-To-Send RA:a4:1a:3a:1e:f9:9f (oui Unknown)
09:04:25.891862 24.0 Mb/s 2437 MHz 11g -60dBm signal antenna 3 Clear-To-Send RA:b8:78:26:94:07:3e (oui Unknown)
09:04:25.891967 24.0 Mb/s 2437 MHz 11g -61dBm signal antenna 3 BA RA:b8:78:26:94:07:3e (oui Unknown)
09:04:25.892418 24.0 Mb/s 2437 MHz 11g -62dBm signal antenna 3 BA RA:b8:78:26:94:07:3e (oui Unknown)
09:04:25.893163 24.0 Mb/s 2437 MHz 11g -61dBm signal antenna 3 Clear-To-Send RA:b8:78:26:94:07:3e (oui Unknown)
09:04:25.893288 24.0 Mb/s 2437 MHz 11g -60dBm signal antenna 3 BA RA:b8:78:26:94:07:3e (oui Unknown)
09:04:25.895494 1.0 Mb/s 2437 MHz 11b -81dBm signal antenna 3
09:04:25.902891 24.0 Mb/s 2437 MHz 11g -70dBm signal antenna 3 Request-To-Send TA:60:3a:7c:77:22:f1 (oui Unknown)
09:04:25.903699 6.0 Mb/s 2437 MHz 11g -79dBm signal antenna 3 Acknowledgment RA:cc:b5:d1:8a:f0:90 (oui Unknown)
09:04:25.904414 24.0 Mb/s 2437 MHz 11g -79dBm signal antenna 3 BA RA:cc:b5:d1:8a:f0:90 (oui Unknown)
09:04:25.931026 2437 MHz 11n -69dBm signal antenna 3 19.5 Mb/s MCS 2 20 MHz long GI mixed Data IV:dfe1 Pad 20 KeyID 0
09:04:25.932718 1.0 Mb/s 2437 MHz 11b -76dBm signal antenna 3 Beacon (501) [1.0* 2.0* 5.5* 11.0* 6.0 9.0 12.0 18.0 Mbit] ESS CH: 6, PRIVACY
09:04:25.935011 1.0 Mb/s 2437 MHz 11b -34dBm signal antenna 3 Beacon (AutoConnect) [1.0* 2.0* 5.5* 11.0* 6.0 9.0 12.0 18.0 Mbit] ESS CH: 6, PRIVACY
09:04:25.936286 11.0 Mb/s 2437 MHz 11b -67dBm signal antenna 3 Acknowledgment RA:2a:d9:a0:0c:c4:62 (oui Unknown)
09:04:25.943268 1.0 Mb/s 2437 MHz 11b -83dBm signal antenna 3 Beacon (TP-LINK-101) [1.0* 2.0* 5.5* 11.0* 9.0 18.0 36.0 54.0 Mbit] ESS CH: 6, PRIVACY
09:04:25.943425 24.0 Mb/s 2437 MHz 11g -74dBm signal antenna 3 Clear-To-Send RA:60:3a:7c:77:22:f1 (oui Unknown)
09:04:25.946289 1.0 Mb/s 2437 MHz 11b -78dBm signal antenna 3 Beacon (xu) [1.0* 2.0* 5.5* 11.0* 9.0 18.0 36.0 54.0 Mbit] ESS CH: 4, PRIVACY
09:04:25.957327 24.0 Mb/s 2437 MHz 11g -60dBm signal antenna 3 BA RA:b8:78:26:94:07:3e (oui Unknown)
09:04:25.959083 24.0 Mb/s 2437 MHz 11g -60dBm signal antenna 3 Clear-To-Send RA:b8:78:26:94:07:3e (oui Unknown)
09:04:25.959092 6.0 Mb/s 2437 MHz 11g -78dBm signal antenna 3 Acknowledgment RA:cc:b5:d1:8a:f0:90 (oui Unknown)
09:04:25.959133 24.0 Mb/s 2437 MHz 11g -60dBm signal antenna 3 BA RA:b8:78:26:94:07:3e (oui Unknown)
09:04:25.978663 1.0 Mb/s 2437 MHz 11b -77dBm signal antenna 3 Beacon (Xiaomi_A2EC) [1.0* 2.0* 5.5* 11.0* 6.0 9.0 12.0 18.0 Mbit] ESS CH: 7, PRIVACY
09:04:25.980290 24.0 Mb/s 2437 MHz 11g -22dBm signal antenna 3 Clear-To-Send RA:88:2d:53:be:74:d4 (oui Unknown)
09:04:25.980411 2437 MHz 11n -34dBm signal antenna 3 72.2 Mb/s MCS 7 20 MHz short GI mixed Data IV:3223 Pad 20 KeyID 0
09:04:25.980419 24.0 Mb/s 2437 MHz 11g -18dBm signal antenna 3 BA RA:88:2d:53:be:74:d4 (oui Unknown)
^C
73 packets captured
73 packets received by filter
0 packets dropped by kernel
3. 参考资料
【1】wikipedia: WiFi monitor mode
【2】wikipedia: OSI model - 7 layer
![Introduction to Multi-Armed Bandits——03 Thompson Sampling[1]](https://img-blog.csdnimg.cn/img_convert/8f3088233b403fa4a19fd94051993253.png)
![[java/初学者]类的继承](https://img-blog.csdnimg.cn/33e4026791414af3a19fb854600468b5.png)