Skip to content

Packet Monitor

Jump to bottom
Just Call Me Koko edited this page Sep 27, 2023 · 5 revisions

Packet Monitor

ESP32 WROOM-32U

Menu Path

WiFi>Sniffers>Packet Monitor

Info

The ESP32 is able to filter captured WiFi traffic to display and harvest general 802.11 management frames on a graphical user interface.

ESP32 WROOM-32U

Filtering Traffic

Scan iterations occur once every 1/10th of a second.
Once a packet is captured, is check for 3 different identifying bytes:

Beacon

if ((snifferPacket->payload[0] == 0x80) && (display_obj.display_buffer->size() == 0))

Probe Request

if ((snifferPacket->payload[0] == 0x40) && (display_obj.display_buffer->size() == 0))

Deauthentication/Disassociation

if ((snifferPacket->payload[0] == 0xA0 || snifferPacket->payload[0] == 0xC0 ) && (display_obj.display_buffer->size() == 0))

Displaying Metrics

Traffic density of displayed on a landscape oriented line graph. Beacon, Probe Request, and Deauthentication frames are displayed as Green, Blue, and Red lines respectively.
Once the line graph reaches the end of the screen, the graph begins refreshing and overwriting starting at the beginning of the graph.

Input Buttons

The X and Y axis both feature + and - buttons which adjust the zoom level of the line data displayed on the graph.
The current sniffing channel can be adjusted by hitting the + or - buttons associated with the channel configuration at the top of the screen.

This function can be exited by hitting the red X button at the top of the screen.

All captured traffic will be saved to an attached SD card in a PCAP file.

Clone this wiki locally