Page 1 of 1

Type Variable in WiGLE Data

Posted: Thu Aug 28, 2003 11:11 pm
by izzy4505
I've been studying data outputted by WiGLE, and I'm quite curiousity about the 'type' field. So far, I've found these for the possible values: infra, infrastruc, ad-hoc, BBS, turbocell, data, and probe. Would it be correct to assume that:

infra=802.11 infrared access point
infrastruc=Regular AP
ad-hoc=Peer to Peer 802.11 Network
BBS=Same as infrastruc
turbocell=KarlNet's proprietary 802.11-like wireless protocol

I have no guess as to what data and probe are. Are these assumptions correct? Are there more possible types? Thanks in advance. :)

Data

Posted: Fri Aug 29, 2003 2:08 pm
by bobzilla
That's correct, except that infra = infrastruc = BBS = regular AP. Probe probably means the package got it's info by probing for the net and didn't get info about what it was. Data is pry bad data (I really need to write a scrubbing script to clean bad/currupted data from the db).

Found another type

Posted: Fri Aug 29, 2003 4:00 pm
by izzy4505
Another question. . . is there a difference between ???? and when the field is null?

Not really

Posted: Fri Aug 29, 2003 11:45 pm
by bobzilla
Many fields I default to question marks, if it's blank it just means the parser got a zero-length string for the field (usually).

Re: Data

Posted: Mon Sep 01, 2003 11:53 pm
by mentat
That's correct, except that infra = infrastruc = BBS = regular AP. Probe probably means the package got it's info by probing for the net and didn't get info about what it was. Data is pry bad data (I really need to write a scrubbing script to clean bad/currupted data from the db).
Actually probe probably means that kismet saw a client probing for that network at that location. It isn't actually an AP of any sort.

Ok.....

Posted: Tue Sep 02, 2003 5:50 pm
by izzy4505
So probe means that somebody was using that ap?

Re: Ok.....

Posted: Tue Sep 02, 2003 6:57 pm
by mentat
So probe means that somebody was using that ap?
Probe means that kismet saw a client probe for an SSID, but never saw an AP answer the probe. NetStumbler is a moving <no ssid> "probe network." If kismet does see an association take place then, in the kismet client, it files the "probe network" as a client to the AP. I think at that point the client is no longer recorded in at least some of the output file formats. It might still be in XML, but I'm not sure.