Filter by IEEE802.11 Signal strength

retag add tags

Hi All

So I'm a bit bad with building expressions that will actually filter but this filter I'm trying to create would benefit a lot of WS users, not just me.

It's pretty simple: I would just like to see all packets / frames / all that have a signal strength equal to or greater than -70dBm.

Obviously the 70 is a variable but I just used that number because devices with a signal strength of that or greater are usually quite close to the device you're WSing from.

If anyone is able to reply with the expression then that would be about the most cool thing in my life right now.

Cheers.

Maybe something like this:

wlan_radio.signal_dbm >= -70

There are other ways, too, and some possible filters come and go with versions. I'd start here then if this doesn't help, you can find some other references below.

1.5k

Bob Jones

answered 2018-09-23 13:01:28 +0000

19.9k

Guy Harris

updated 2018-09-23 16:48:15 +0000

edit flag offensive 0 remove flag delete link

Comments

wlan_radio filters are preferable, because there are several different types of radio metadata header that Wireshark can read (radiotap, Prism, AVS, PPI, NetMon, "Peek tagged", etc.), and the wlan_radio header provides a metadata-header-independent version of which of that information is available (not all metadata headers provide absolute signal strength in dBm), so you can test it regardless of the metadata header used in a particular capture.

Guy Harris (2018-09-24 18:40:36 +0000) edit

add a comment see more comments

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account. This space is reserved only for answers. If you would like to engage in a discussion, please instead post a comment under the question or an answer that you would like to discuss.

Filter by IEEE802.11 Signal strength edit

Comments

1 Answer

Comments