crystalheeler
commented
11 months ago This will likely utilize one or some of these API calls:
dot11.device.probed_ssid_map | 336 | map[size_t, x]/25 | probed SSIDs -- | -- | -- | -- dot11.probedssid.ssid | 337 | string/0 | probed ssid string (sanitized) -- | -- | -- | -- dot11.device.probed_ssid | 358 | map[field, x]/965412502 | probed ssid -- | -- | -- | -- dot11.device.probe_fingerprint | 407 | uint32_t/6 | Probe (Client->AP) fingerprint -- | -- | -- | -- dot11.probedssid.last_time | 341 | uint64_t/8 | last time probed -- | -- | -- | -- dot11.device.last_probed_ssid_record | 410 | alias/26 | last probed ssid, complete record -- | -- | -- | -- dot11.device.num_probed_ssids | 359 | uint64_t/8 | number of probed SSIDs -- | -- | -- | -- dot11.probedssid.bssid | 339 | mac_addr/11 | probed ssid BSSID -- | -- | -- | --
Figure out how to ingest probed SSIDs (from any device, but typically clients/unknowns/unassociated), display in another columns and add to Kismon database